ive started receiving emails from myself, showing that everyone else in my contact list has also been sent the same email. so someone has my contact list and is somehow shooting off emails without my permission. likely, i will need a new email address. any suggestions? does anyone know if there is an email service that allows you to restrict how you can send emails? this issue with my current email is only going to get worse.
Thread Recap (last 10 posts from newest to oldest)
Apr 13, 12 at 9:09pm
VeGiTAX2
Only way it could go on for a limited period after a password change is if they actually captured your login session key, usually those only last for 24-48hrs though so even then it would expire out.
If you change the password and go from there you should be fine, in the past there were many more ways to exploit hotmail accounts to the point where it was pointless to battle on :/ I don't think a spoofing situation was ever actually on the table in this case given MS actually verified against their logs that malicious mail had been sent from the account in some form by the hijacker.
Apr 13, 12 at 7:33pm
hiigaran
well i dont think there have been more, but i cant be certain. ill have to check with people in my contact list.
Apr 13, 12 at 6:57pm
Saga
Whatever is going on, this is bizarre. I just learned a bunch of my friends are having this problem. Fusion has been sending this mass-spam to me.
How's the monitoring going Hiigaran? I'm 100% certain now it's not an email spoof. If changing your password still causes the mass spam to be sent, then something really bizarre is going on.
Apr 13, 12 at 12:19am
hiigaran
so in that case, would a password change be enough?
Just curious because this started after your system went down, have you been using public wifi at all on your PSP when posting? If so there's a chance someone sniped your login data using a router exploit.
my psp lacks the memory to open hotmail. i do it on my mothers laptop, or at school. my mother basically just goes on youtube and facebook, so if it was because of something on the computer, it would be the school ones.
Apr 12, 12 at 3:42pm
VeGiTAX2
Spoofing happens but reports about spoofing don't result in account lockdowns unless they find a match. In this case bots use their own client to do the emails under the stolen login credentials, very very very very very very very few bots use a web interface because it's so slow for mass mailing.
Apr 12, 12 at 3:37pm
Saga
Hiigaran, some spambots don't even use your account: There are methods to modify e-mail headers to spoof a sending address. It's possible it's not your account iself the one sending out spam, but an external computer in a completely unrelated server.
Apr 12, 12 at 3:27pm
10jdrole
Just curious, is it a hotmail account? I've seen the same situation occur several times with friends' hotmail accounts, but I rarely see it from gmail.
also, even stranger is that i looked in to my sent folder, and i saw no sent messages. how the hell are emails being sent, then?
Thunderbird or any dedicated mail app can access hotmail servers if they have your email and password already. If it's deeper and they have a logged in session then it needs to get purged or they'll still be able to use it for mass distribution.
In the cases of spam sent from a 3rd party app you'll never see it in your box, you'll just take all the heat for it. I haven't used hotmail for ages but they should be able to figure out your IP history.
Just curious because this started after your system went down, have you been using public wifi at all on your PSP when posting? If so there's a chance someone sniped your login data using a router exploit.
Apr 12, 12 at 11:56am
hiigaran
yeah i thought of that too. im assuming theres no log or anything, right?
Apr 12, 12 at 8:09am
Chekkaa
The first thing also sounds fairly pointless to me. As for the second thing, the hijacker could have deleted the emails from the sent folder after they sent them.
Powered by neoforums v1.6.5b (aperture) Copyright Neo Era Media, Inc. 1999-2013