How to Retrieve a Hacked Yahoo Mail Account (and Facebook, too)

I got really, really pissed when I found out that my sister’s Yahoo Mail and Facebook account has been compromised (or in layman’s term, somebody has taken over the account). I wanted to know who’s been doing it because in just 24 hours, my sister’s accounts have been hacked twice.

This tutorial will only work if and only if:

1. You are sure of your password but it doesn’t work (after checking the caps lock, num lock key)

2. Your Yahoo Mail security question has been changed.

The culprit? I am pretty sure it’s a Trojan and whatever kind of Trojan that is, it definitely targets Yahoo and Facebook. A Trojan works its way to a computer through a link, application or anything that requires a user’s permission. It’s probably been there for only a few days ago.

The Trojan was smart enough to change the Yahoo Mail security question. But the questions were just from Yahoo.

To retrieve a compromised Yahoo Mail account, do the following:

1. On the Yahoo Mail login page, click “I can’t access my account” just below the password field. Yahoo will take you to a page with four options

2. Choose “My account may have been compromised” radio button. Click next.

3. Enter your Yahoo ID as requested, and the CAPTCHA. Click next.

4. Yahoo will take you to the Security Question page. A security question will appear. Below the question is the date when that question was made. The real security questions are made upon creation of the Yahoo account. Just click on “This is not my question” below the field.

5. Yahoo will then ask you your real security question added on the date your account was created. Answer the question correctly.

6. Another security question will be asked. Answer it correctly (because upon creation of your Yahoo account, you will be asked to create and answer two security questions).

7. If answered correctly, you will be directed to a page asking for your new password. Repeat the new password for confirmation.

What’s good about Yahoo Mail is that it never purges your security questions. I was able to retrieve my sister’s Yahoo Mail account through that process.

Now it’s time for Facebook.

As you know, your Facebook is linked to an email address you use to login. If you cannot get through your Facebook but can otherwise do so in your email, then you’re just a few steps ahead:

1. Click “Forgot your password?”

2. Enter your Email address (the one used in Facebook) or the mobile number verified in your facebook account.

3. Complete the CAPTCHA. Facebook will take you to Confirm Password Request page. Verify your account by clicking “Reset my password”.

4. Check your email. Facebook will send you a confirmation code to verify that you really own the account.

5. Enter confirmation code shown in your email.

6. Enter new password and repeat it for confirmation.

This Trojan works through phishing. It takes over your account for spamming (and scamming) purposes. You do not want this to happen to you so always make sure that you login to a secured computer.