403322 - a number of my online accounts (yahoo, paypal, ebay) were compromised

Status: RESOLVED INVALID

(Toolkit :: Password Manager, defect)

Description

[William]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9

the only thing my site accounts had in common was that my passwords were stored password manager.  My yahoo password was stolen twice in a week, my ebay and paypal passwords were also compromised.

Reproducible: Sometimes

Steps to Reproduce:
1.
2.
3.

Comment 1

[Bob Clary [:bc] (inactive)]

What extensions have you installed into Firefox?

What applications have you recently installed into Mac OS X? I assume you are on 10.4?

How current have you been with regard to applying security updates from Apple? 

What plugins do you have installed? Type about:plugins into the urlbar to see the list.

Comment 2

[Bob Clary [:bc] (inactive)]

Bill replied:

OS 10.4.10

I haven't installed any applications.

I am current on my apple updates...it does an automatic check and I always update it.

Java Embedding Plugin 0.9.6.2
QuickTime Plug-in 7.3
Flip4Mac Windows Media Plugin 2.1.2
Shockwave Flash
Java Plug-in (CFM)
Shockwave for Director
Java Plug-in

Comment 3

[Bob Clary [:bc] (inactive)]

dveditz: ping?

Comment 4

[Justin Dolske [:Dolske]]

So, I don't see much to do here. I think it's far more likely that the accounts were compromised as a result of some other attack (keygrabber, network sniffer,  someone snooping on your computer, spyware, phishing, etc.).