Going Postal

From: "[windows-1256] خيرالدين" (eee0077@hotmail.com)
X-Originating-IP: [212.138.47.26]
To: jericho@attrition.org
Date: Wed, 11 Aug 2004 07:00:46 -0700
Subject: hack password

pls hach the hotmailpassword of this email
danak1972@hotmail.com
& send the password to my email
kh86kh@hotmail.com

At this point, I sent the mail with headers to abuse@hotmail.com as usual. For some reason, they apparently forwarded it to Passport support..

From: Microsoft .Net Passport Customer Support (T01.HAC@css.one.microsoft.com)
X-Originating-IP: 10.251.84.153
To: jericho@attrition.org
Date: Fri, 13 Aug 2004 18:50:10 -0700
Subject: CST170274985ID - RE:hack password (fwd)

Dear Member, 

Thank you for writing to Microsoft .NET Passport about the un-authorized
access to your account. 

I understand that you are experiencing difficulty in accessing your
Hotmail account and you need password assistance. I look forward to
providing you with assistance today. 

After verifying your account (danak1972@hotmail.com) in our database, I
am happy to inform you that I could not find any symptoms of an
un-authorized access to your account. 

Let me inform you that I have mentioned below are three methods for
resetting your password. I would like to inform you that I have checked
your account and found that your account was blocked. We have taken
necessary steps to unblock your account. 

1. To reset your password online at: 

[..]

Deepak 
Microsoft .NET Passport Representative

From: security curmudgeon (jericho@attrition.org)
To: Microsoft .Net Passport Customer Support (T01.HAC@css.one.microsoft.com)
Date: Fri, 13 Aug 2004 22:00:40 -0400 (EDT)
Subject: Re: CST170274985ID - RE:hack password (fwd)

: Dear Member,
:
: Thank you for writing to Microsoft .NET Passport about the un-authorized
: access to your account.
:
: I understand that you are experiencing difficulty in accessing your
: Hotmail account and you need password assistance. I look forward to
: providing you with assistance today.

Oh dear lord would you READ the e-mail? I don't have some gimpy hotmail
account and arbitrarily decided I would email myself from another hotmail
account, asking myself to hack my first account. This is one of your loser
customers asking me to hack some other account.

This violates your TOS unless you want to protect this loser like other
times.

: Deepak
: Microsoft .NET Passport Representative

.. a poor one at that.

From: MSN Hotmail Customer Support 
X-Originating-IP: 10.251.84.153
To: jericho@attrition.org
Date: Fri, 13 Aug 2004 20:50:10 -0700
Subject: RE:Re: CST170274985ID - RE:hack password (fwd)

Hello, 

Thank you for writing to Hotmail Technical Support. 

I understand your concern about the unwanted e-mail received. 

MSN Hotmail does not tolerate its members being the victims of
unsolicited e-mail, and is equally intolerant of Hotmail members who
send junk e-mail. Sending junk e-mail from a Hotmail account is a
violation of our Terms of Use (TOU) and as such, is a cause for the
termination of that account. 

I have closed the account, eee0077@hotmail.com you reported in
accordance with the Hotmail Terms of Use (TOU). It is a strict violation
of the TOU for our members to send objectionable material of any kind or
nature using our service. 

You can view our rules and regulations at: 
http://privacy.msn.com/tou/default.asp 

Please contact us if you have any questions about Hotmail, we will be
glad to assist you. 

Sincerely, 

Ally 
MSN Hotmail Technical Support Representative