More AOL password theft…

I was hit by a spam attack this morning and received around 350 emails over the course of 12 hours. The attacker was [email protected] and he used a Yahoo! bouncer to forward people to a fake Love@AOL page. After deconstructing his email and Web page, I sent analysis to abuse, webmaster and security accounts at all the services he used (yahoo.com, primushost.com, aol.com and livin4.net). The only provider that has not responded yet is livin4.net (their “tech support” phone number consisted of a consumer answering machine).

Yahoo! has terminated this user and I don’t know what other action has been taken.