ckf Posted April 30, 2019 Share Posted April 30, 2019 The bastards hacked my mail email account. They are using it to send spam mail all over the world. My passwords are pretty good on stuff like that so I'm not sure how they got it. I'm running a scan on my laptop now, but I think it may have been from my phone. I just added the email account to my phone about a week before I started getting mail warning messages from my server. Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 Meuller is on to you!! Neal 2 Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 Just now, NaturallyAspirated said: Meuller is on to you!! Neal Computer came back clean. The only other thing it could be is an app on the phone, or they used a password cracker? Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 How do you know they are using your account to send mail, are the emails in the sent mail? Neal Quote Link to comment Share on other sites More sharing options...
ArcticCrusher Posted April 30, 2019 Share Posted April 30, 2019 3 minutes ago, NaturallyAspirated said: How do you know they are using your account to send mail, are the emails in the sent mail? Neal X2 That works for IMAP. Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 9 minutes ago, NaturallyAspirated said: How do you know they are using your account to send mail, are the emails in the sent mail? Neal I got the failed delivery warnings and I also have the server set to send me a message when an account attempts to send more than 100 emails at a time. The source code shows that they used the password. Here's what they were sending. Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 8 minutes ago, ArcticCrusher said: X2 That works for IMAP. I use IMAP and I just checked, only my sent emails show. Quote Link to comment Share on other sites More sharing options...
SSFB Posted April 30, 2019 Share Posted April 30, 2019 I use LastPass Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 Where does it show they used the password? Neal Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 Is it ok to call you Sonia now as well? Neal 1 Quote Link to comment Share on other sites More sharing options...
ArcticCrusher Posted April 30, 2019 Share Posted April 30, 2019 (edited) 10 minutes ago, ckf said: I use IMAP and I just checked, only my sent emails show. Don't think they have your password then, Sonia. Edited April 30, 2019 by ArcticCrusher Quote Link to comment Share on other sites More sharing options...
ArcticCrusher Posted April 30, 2019 Share Posted April 30, 2019 (edited) 10 minutes ago, SSFB said: I use LastPass Same here. Except on my phone, don't do any personal banking etc or anything I really care about on my phone. Edited April 30, 2019 by ArcticCrusher Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 4 minutes ago, ArcticCrusher said: Same here. Except on my phone, don't do any personal banking etc or anything I really care about on my phone. Why not? Neal Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 18 minutes ago, SSFB said: I use LastPass What's that? 14 minutes ago, NaturallyAspirated said: Where does it show they used the password? Neal === -auth_id john@nekwx.com === Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 13 minutes ago, NaturallyAspirated said: Is it ok to call you Sonia now as well? Neal You would have a hard time keeping up. They use a different name for each email Quote Link to comment Share on other sites More sharing options...
ArcticCrusher Posted April 30, 2019 Share Posted April 30, 2019 7 minutes ago, NaturallyAspirated said: Why not? Neal Maybe I'm old school, zero banking/investments on phone. Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 1 minute ago, ArcticCrusher said: Maybe I'm old school, zero banking/investments on phone. Must be. Phone is nice for 2 factor. Neal Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 The only other thing I can think of is they hacked WP (WordPress) and inserted a script to send email. I did quickly scan the WP files but didn't see anything that stood out. Quote Link to comment Share on other sites More sharing options...
Beavis and Butt-Head Posted April 30, 2019 Share Posted April 30, 2019 Damn, were you able to restore this account back ? or some fucker still has it ? Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 5 minutes ago, ckf said: What's that? === -auth_id john@nekwx.com === I would imagine that is just the way that your address is getting into the spoofing automation. It doesn't look to me like you were hacked, simply being spoofed for spam. Neal Quote Link to comment Share on other sites More sharing options...
NaturallyAspirated Posted April 30, 2019 Share Posted April 30, 2019 3 minutes ago, ckf said: The only other thing I can think of is they hacked WP (WordPress) and inserted a script to send email. I did quickly scan the WP files but didn't see anything that stood out. I would imagine it was simply a crawler on that got your domain and used common first names with it and emailed from that. Neal Quote Link to comment Share on other sites More sharing options...
Rod Posted April 30, 2019 Share Posted April 30, 2019 57 minutes ago, ckf said: The bastards hacked my mail email account. They are using it to send spam mail all over the world. My passwords are pretty good on stuff like that so I'm not sure how they got it. I'm running a scan on my laptop now, but I think it may have been from my phone. I just added the email account to my phone about a week before I started getting mail warning messages from my server. Buzzfeed has the scoop! Quote Link to comment Share on other sites More sharing options...
ckf Posted April 30, 2019 Author Share Posted April 30, 2019 5 minutes ago, Beavis and Butt-Head said: Damn, were you able to restore this account back ? or some fucker still has it ? Changed the password and emptied the outgoing mail que on the server. 4 minutes ago, NaturallyAspirated said: I would imagine that is just the way that your address is getting into the spoofing automation. It doesn't look to me like you were hacked, simply being spoofed for spam. Neal 3 minutes ago, NaturallyAspirated said: I would imagine it was simply a crawler on that got your domain and used common first names with it and emailed from that. Neal How do I stop it? Quote Link to comment Share on other sites More sharing options...
SSFB Posted April 30, 2019 Share Posted April 30, 2019 16 minutes ago, ckf said: What's that? === -auth_id john@nekwx.com === Password manager. I only know one password. All other accounts use a random character string password that is saved in LastPass. Nobody logs into my LastPass without the master password and then a code from my Google Two Factor authentication. 1 Quote Link to comment Share on other sites More sharing options...
awful knawful Posted April 30, 2019 Share Posted April 30, 2019 That old asshole p550 got friends in low places! Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.