This Simple Trick Requires Only Your Phone Number to Hack your Email Account

We all have been receiving spam phone calls and messages on almost daily basis from scammers who want to pilfer your money and personal information, but a new type of social engineering hack that makes use of just your mobile number to trick you is a little scarier.

Security firm Symantec is warning people about a new password recovery scam that tricks users into handing over their webmail account access to the attackers.

In order to get into your email account, an attacker does not need any coding or technical skills. All an attacker needs your email address in question and your cell phone number.

Since the process to reset the password is almost similar to all mail services, this new password recovery scam affects all popular webmail services including Gmail, Yahoo, and Outlook among others.

Symantec has provided a video explanation of how this new hack attack works. The trick is as simple as it sounds: if you want to reset someone’s email account password, all you actually need is their mobile number.

Here's How the Scam Works:

Send a text from an unknown number to the victim’s phone, asking them to verify their account by replying with the verification code they are about to receive in order to ensure their Google account is secure, but in real the code is a password resets code.

• Send another text message containing an unlock code to the registered phone.
• The victim receives the code with a text something like this: "This is Google. There has been unauthorized activity on your account. Please reply with your verification code."

• As soon as victim responds with the verification code, the email address is forfeited, and the attacker can log into victim’s Gmail account without detection.

This social engineering trick sounds so easy and requires almost no technical skills to get into anyone’s email account.

Most of us reply to the unknown phone calls and messages thinking it is from the company, as receiving messages and phone calls from companies is not something uncommon.

Always be Defensive to such Scams

Before watching the video, someone would have never thought of such a method to hack someone’s account.

Of course, the untrained mind could easily fall victim to the text asking for a response. But, as Symantec says, "Legitimate messages from password recovery services will only tell you the verification code and will not ask you to respond in any way."

The workaround is not to fall victim for such kinds of scams and always examine the messages you receive.

How To Hack Any Account like Facebook ,Twitter , Gmail ,Hotmail ,Skype and yahoo etc.(Cookie Stealing Attack)

Using this method you can hack Any Account like Facebook ,Twitter , Gmail ,Hotmail ,Skype and yahoo etc.

This works At LAN(local Area Network) . Its best place to hack at university, cafe , public place where computer
are on one LAN simple Example WI-Fi.

What is Cookies And how the use of stealing cookies?

Cookies are file’s that stored on Any computer’s By any website when a you visits them . The cookie used by the web server to check the authenticate the Real user . Like you Enter Login in Facebook then a unique string’s Generated and the one copy saved in the web server and other is saved on your Browser as a Cookie file . Both are matched when you open a Account. So then finally we will start.

Step 1:
Download the Wire Shark and install it.

Step 2:
Next open the Wire Shark and then click on interface.

Step 3:
Next choose a interface which is received and sending packet and click on start

Step 4:
Continue the sniffing for around like 10 minutes.

Step 5:
After a maximum 10 minute stop the sniffing by going to a capture menu.

Step 6:
Its important step, now filter to http. cookie contains “datr”. Then filter the all search for http cookies with a name of datr and there is Facebook authentication’s cookie.



Step 7:
Now click on it and then go to the copy > Bytes > Printable Text only



Step 8:
Now for next step you must have 3 thing,
1. Mozilla Firefox [browser]
2. Grease Monkey[add-on]
3. Cookie injector[code]
and then open www.facebook.com make sure you are not login.



Step 9:
Press the button Alt+C to bring up a cookie.




Step 10:
Injector and then Simply paste in a cookie value into it.




Step 11:
Now refresh your page so then finally you Enter the Victim Account.