---
title: "XSS bug in Hotmail, allowed to steal email accounts - Ventas de Seguridad"
description: "The latest news for Latin American integrators, contractors and wholesalers in electronic security."
url: "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html"
date: "2026-07-23T17:18:35+00:00"
language: "en-GB"
---

#  [ XSS bug in Hotmail, allowed to steal email accounts](https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html "XSS bug in Hotmail, allowed to steal email accounts")

      Details     27 May 2011           Hackers have been stealing emails from Hotmail users' accounts, taking advantage of a programming bug on Microsoft's website.The programming bug has allowed hackers to read and steal emails from Hotmail users, according to security firm Trend Micro, sending specially manipulated messages to several thousand victims.

Trend Micro discovered the problem on May 12, when it found a message sent to a...

 Hackers have been stealing emails from Hotmail users' accounts, taking advantage of a programming bug on Microsoft's website.The programming bug has allowed hackers to read and steal emails from Hotmail users, according to security firm Trend Micro, sending specially manipulated messages to several thousand victims.

Trend Micro discovered the problem on May 12, when it found a message sent to a victim in Taiwan that looked like a Facebook notification alert. In it, the victim was alerted that someone had accessed their Facebook account from a new location.

- Publicidad -

Included in the message was a script that then directed users' messages to hackers. But for the attack to work, the victims had to have authenticated to Hotmail and opened the message. If it was simply previewed, the attack was not effective.

The flaw in the Microsoft website that has allowed hackers to carry out their goal is a common cross-site scripting web programming error and has already been solved last Friday 20.

Complete content in original CSO source

**[See original.](http://feedproxy.google.com/~r/NoticiasSeguridadInformatica/~3/TcVsANYJ-0g/bug-xss-en-hotmail-permitio-robar.html "Bug XSS en Hotmail, permitió robar cuentas de corr")**

      ###  No comments

• If you're already registered, please log in first. Your email will not be published.

###  Comments are closed

 The comments for this content are closed.

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Inicio", "item": "https://www.ventasdeseguridad.com/en" }, { "@type": "ListItem", "position": 2, "name": "Latest News", "item": "https://www.ventasdeseguridad.com/en/news/latest-news.html" }, { "@type": "ListItem", "position": 3, "name": "Cyber Security", "item": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security.html" }, { "@type": "ListItem", "position": 4, "name": "XSS bug in Hotmail, allowed to steal email accounts", "item": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" } ] }
```

```json
{ "@context": "https://schema.org", "@type": "VideoObject", "name": "XSS bug in Hotmail, allowed to steal email accounts", "description": "Hackers have been stealing emails from Hotmail users&#039; accounts, taking advantage of a programming bug on Microsoft&#039;s website.The programming bug has allowed hackers to read and steal emails from Hotmail users, according to security firm Trend Micro, sending specially manipulated messages to several thousand victims. Trend Micro discovered the problem on May 12, when it found a message sent to a...", "thumbnailUrl": "https://www.ventasdeseguridad.com/", "uploadDate": "2011-05-27T08:40:36-05:00", "contentUrl": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" }
```

```json
{ "@context": "https://schema.org", "@type": "NewsArticle", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" }, "headline": "XSS bug in Hotmail, allowed to steal email accounts - Ventas de Seguridad", "description": "The latest news for Latin American integrators, contractors and wholesalers in electronic security.", "image": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/" }, "publisher": { "@type": "Organization", "name": "Ventas de Seguridad", "logo": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/vds.png" } }, "author": { "@type": "Person", "name": "Max Jaramillo", "url": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" }, "datePublished": "2011-05-27T08:40:36-05:00", "dateCreated": "2011-05-27T06:45:00-05:00", "dateModified": "2022-04-25T18:22:56-05:00" }
```

```json
{ "@context": "https://schema.org", "@type": "Article", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" }, "headline": "Latest News", "description": "The latest news for Latin American integrators, contractors and wholesalers in electronic security.", "image": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/vds.png" }, "publisher": { "@type": "Organization", "name": "Latin Press, Inc.", "logo": { "@type": "ImageObject", "url": "https://www.ventasdeseguridad.com/images/metatags/16x9/lpi-eventos-online.png" } }, "author": { "@type": "Person", "name": "Ventas de Seguridad", "url": "https://www.ventasdeseguridad.com/en/news/latest-news/434-computer-security/14752-xss-bug-in-hotmail-allowed-to-steal-email-accounts.html" } }
```
