Go Back   TechTalkz.com Technology & Computer Troubleshooting Forums » Tech World » Computer Security
Reply
 
Thread Tools Display Modes
Old 11-03-2008, 11:44 AM
  post #1
Founder
 
Strider's Avatar
 
Join Date: Nov 2005
Location: The Last City Zion!
Posts: 2,325
Thanks: 200
Thanked 191 Times in 157 Posts
Rep Power: 49 @ 2407
Strider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just Great
Smile G-Archiver - The Gmail Archiver Scam

A few days back codinghorror reported () Gmail account hacking backdoor in the popular mail archiving software G-archiver(). This application allows you to download and backup all emails from your gmail account. But apparently the developer included the code to send an email to his email ID with all usernames and passwords.

The following is the screenshot posted by codinghorror.



When I attempted to download the software, I found this note () and the download seems offline.

Quote:
What happened with G-Archiver?

It has come to our attention that a flaw in the coding of G-Archiver may have revealed customer's Gmail account usernames and passwords.

It is urgent that you remove the current version of G-Archiver from your computer, and change your Gmail account password right away.

What happened was that a member of our development team had inserted coding used for testing G-Archiver in the debug version and forgot to delete it in the final release version.

We sincerely apologize and assure you that this coding mishap was in no way intentional.

We'll be releasing a new version that corrects the flaw in version 1.0. The new version will be available very soon.

In order to analyze the code I searched a bit and found a download link here:




Here is what I found:



Interesting isn't it?

Btw. Do Not use any software asking for your online account credentials. Not only Gmail but Orkut, Ebay etc etc.




Strider is offline   Reply With Quote
Old 11-03-2008, 12:27 PM
  post #2
Founder
 
Strider's Avatar
 
Join Date: Nov 2005
Location: The Last City Zion!
Posts: 2,325
Thanks: 200
Thanked 191 Times in 157 Posts
Rep Power: 49 @ 2407
Strider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just GreatStrider is just Great
Re: G-Archiver - The Gmail Archiver Scam

Interesting to see that in the comments section in many forums , lots of people are spitting fire at Dustin, who found the culpit!!!




Strider is offline  
Thread Starter
Reply With Quote
Old 11-03-2008, 01:03 PM
  post #3
ƒ(ψ)=Θº×φ
 
bakuryu's Avatar
 
Join Date: May 2006
Location: India
Age: 22
Posts: 4,221
Thanks: 11
Thanked 317 Times in 290 Posts
Rep Power: 61 @ 1779
bakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant futurebakuryu has a brilliant future
Send a message via Yahoo to bakuryu
Re: G-Archiver - The Gmail Archiver Scam

I think this was purposefully done !!! good thing I never use any managing software and do it manually

bakuryu is offline   Reply With Quote
Old 11-03-2008, 01:54 PM
  post #4
Trusted Member
 
monstèr's Avatar
 
Join Date: Nov 2005
Posts: 33
Thanks: 0
Thanked 3 Times in 3 Posts
Rep Power: 0 @ 0
monstèr is an unknown quantity at this point
Re: G-Archiver - The Gmail Archiver Scam

Valuable info. Beware all using java based mobile apps for chatting!!

monstèr
monstèr is offline   Reply With Quote
Old 11-03-2008, 07:47 PM
  post #5
Contributor
 
anandk's Avatar
 
Join Date: Apr 2007
Posts: 114
Thanks: 0
Thanked 18 Times in 16 Posts
Rep Power: 6 @ 413
anandk is just really niceanandk is just really niceanandk is just really niceanandk is just really niceanandk is just really nice
Send a message via MSN to anandk
Re: G-Archiver - The Gmail Archiver Scam

Thanx for the info, Strider! Carried with acknowledgement at :-)

anandk is offline   Reply With Quote