Finding vulnerable Twitter accounts with expired domains

Re:Finding vulnerable Twitter accounts with expired domains by WA on Sunday August 23, 2020 @01:36PM (#24253628)

This was a common way to harvest 6-digit ICQ numbers back in the day. Hotmail, MSN etc. had expiring email addresses as well that you could register to reset the password to the ICQ number.

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by ObsoleteNerd on Sunday August 23, 2020 @06:54PM (#24255980)

Yeah this has been a common attack since as early as I can remember. Company goes bust? Wait for their domain to expire then register/catch-all and start seeing what mail you get from websites to see where there’s accounts using that domain. Also plenty of more targeted methods too.

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by Thorrez on Sunday August 23, 2020 @08:49PM (#24256636)

I wonder if it would be useful to use Have I Been Pwned to find a list of accounts on websites using that domain.

[ Parent | on HN ]

Re:Finding vulnerable Twitter accounts with expired domains by vmception on Sunday August 23, 2020 @02:53PM (#24254302)

oh yeaahh I forgot about the travesty of expiring emails on free services.

[ Parent | on HN ]