Amnet Webmail login.

You can access your Webmail account by following this link: Webmail Login < This is a link to the page that gives you access to the login page.>

Login using your email address (example: john@xyz.com) and password then press OK or Enter.

A vulnerability in the one of passwords system used in Amnet webmail allowed a remote attacker to gain access to a large number of user accounts. The most important issue about this data breach is that attackers were able to use victims’ Facebook account credentials and log into their accounts, giving them complete control over these users’ digital lives.

Must Read: Amnet Webmail 

How does it work?

As we all know, Amnet is a service provided by Nepal Telecom and it offers both Landline and Mobile phone services. The breach was discovered on May 28th, 2015, and has been patched at least two days before that date. It’s unclear why the incident took so long to disclose, especially considering the sensitive nature of such data.

What kind of information was exposed?

Attackers were able to access email accounts and the personal information associated with them. The data breach also included users’ password hashes and their corresponding salts, real names, home and cell phone numbers, IMSI (International Mobile Subscriber Identity), IMEI (International Mobile Station Equipment Identity), emails associated with the users’ Facebook account, and the last seen IP address.

How many users were affected?

At least 1,49,917  accounts were compromised in the data breach.

What should you do to protect your accounts?

Change all of your passwords and notify Amnet regarding the issue. If you used the same password for multiple sites, change those passwords as well.

Contact your Internet Service Provider and ask what they can do to help you protect yourself against possible leakages of your information associated with these accounts. It’s important to inform them before somebody else does.

I’m a victim of this breach; What should I do?

If you are a victim, your password hashes, and the corresponding salts have been leaked. It’s important to go to Amnet’s website immediately and change your password for Facebook, Gmail, or any other site where you use the same password. If you’ve used the same password on multiple sites, change them as well.

What if the password I used for Facebook is different from the one that Amnet has on file?

I had to change my password on all of my accounts. Amnet has your password but not your corresponding salt so it’s better not to take any chances. Change everything and notify Amnet as soon as possible. It’s important to let them know before somebody else does.

What if I don’t remember my password?

If you can’t recall your password for any reason, it’s possible to recover it. If you’re still able to log into Amnet Webmail, go to  https://www.amnet.com.np/ and click the “Password Recovery” button to access the page where you can recover your password.

Did Amnet contact me?

No, no one did. If there was a data breach it’s recommended to be aware of what’s happening in your digital life including any possible suspicious activity on your Facebook account or other services that use that password.