A WebTV "hack" code is being used to send mail from WebTV users' boxes, without the users being aware of it. This code is being embedded in some newsgroup posts, emails, and web pages. When a WebTV user opens the post, email, or web page, it causes the user's WebTV to send an email to an address embedded in the code, with a message that also is included with the code. The action takes place 'behind the scenes' (that is, users do not even see the mailbox sending mail on the screen).
WebTV is aware of the problem and is working on it. In a December 21 posting to the webtv.users newsgroup, WNI Moderator stated:
From: wuapr@corp.webtv.net (moderator)
***Beware: Hacker Newsgroup***
Hi all,
We are having a problem with some of the users in the hacker newsgroup "alt.discuss.webtv.hacking", so I wanted to make you aware of what's happening.
Some users have created a code so that if you click on their post, an email is sent to the WebTV abuse department from your email address with very vulgar language.
Our engineers are diligently working to eliminate this bug, but in the
meantime please be careful. This newsgroup is known for stirring up some trouble, so everybody should be alert if you decide to access it.
-ck webtv.users moderator
webtv networks
Net4TV Voice has learned that, unfortunately, the knowledge of this code and how to use it has spread outside the hacking groups and is being used in other newsgroups, emails, and websites. Users who hit codes that send email to WebTV's Abuse department will know when they see the auto-response email from Abuse back to them. But those that may send email to some other addressee may not even know that they have sent it.
If you have hit this code and your box has been used to send an email to someone, you will find the email in your Sent Mail folder. If there is no email in your Sent folder that wasn't sent by you, then you have not hit this code. Even so, you'll want to check your Sent folder at least every few days until the problem is fixed -- just because your box hasn't been hit yet doesn't mean that it won't be. Remember that the mail is only in the Sent folder for a short period of time, so you'll need to keep an eye on it. If you dp find that your box has been used to send mail to someone without your knowledge, you may wish to send another explanatory email to the addressee and perhaps point them to this article for an explanation.
What This Problem DOESN'T Affect
This problem only affects WebTV email -- it doesn't affect HotMail or other third-party email that you may be using. It also doesn't mean that people can get into your mailboxes or mess with your own received mail; it is simply triggering your box to send an email in the background.
Net4TV is in communication with WebTV about this problem, and will post an update as soon as we receive additional information, or are notified by WebTV that the problem has been fixed.
