Key-logging behind web mail scam More than 30,000 account details have been posted online

Victims of an industry-wide email scam could have been part of a so-called key-logging attack, according to one security expert.

More than 30,000 account details have been posted online Amichai Shulman from security firm Imperva said the high numbers of victims suggested this type of attack.

Unlike a traditional phishing scam, which lures people into revealing their details on fake websites, key-logging records individual key strokes.

In some cases the malware could have been downloaded automatically.

The scam was highlighted when several lists, detailing more than 30,000 names and passwords from Hotmail, Google and Yahoo web mail accounts were posted online.

BBC News has seen two lists that detail more than 30,000 names and passwords from e-mail providers, including Yahoo and AOL, which were posted online.

Google is aware of a third list, although it is not clear how many names are on it.

The size of the scam has led Mr Shulman to question whether it is a traditional phishing attack.