Account Hacked

[pbj2401]

Hi

Looks like my account has been hacked. Been off the air for a couple weeks following a HDD crash and only got incoming mail working yesterday. Am getting (literally) hundereds of mail system delivery failure notices, returned mails and could not send mail warings.

I'm assuming this is at the server level as I've been off the air.

I've changed my password but am still getting the variety of mail messages as described above.

Is there anything else I can do?

[knobbster]

Can you send some of those warnings here? I believe those are just error messages regarding your mail not able to reach its destiation.

Can you also test if you can successfully send a test mail say your gmail or yahoo account?

[pbj2401]

Hi Knobster

Error messages below .. but this isn't my mail .. I got over 1000 mail delivery failures last night to a range of account addresses that I do not deal with.

Returned mail: xxx Delivery failures on Sat, 09 Jun 2012

Mail Delivert Demon to xxxx@btconnect.com

On this date, there were delivery failures where the associated

deliver status noticifaction messages were suppressed.

--- The following adresses had suppressed delivery status notifications ---

 

List of email addresses on yahoo, gmail, free,fr, oranage.fr, live.co.uk, hotmail.com, plus many others

No information is available on specific messages

As suggested I sent a test email to accounts on yahoo and gmail and these were received without error.

[Trapper20]

Did you get this sorted?

Same thing is happening here (had 76 emails in the last 24 hours)

System Delivery Notice failed to deliver BUT i DIDNT send it in the first place

Changed email password and they still come

Ran a full system scan with Sophos and Norton and they still come

any ideas?

[DaveA · Accepted solution]

Hi Trapper,

You are most likely the victim of email spoofing.  As you've checked your system then it's more than likely that one of the two following scenarios is taking place:

1. Someone else with a malware infection.

If someone with your email address on their system has been infected, then the malware could be sending out as if it were you.  The only thing I can advise is to contact everyone that you know and warn them.

2. Your email address has been harvested online.

There are many ways of scraping email addresses from websites, forums, etc.  Unfortunately if your email address is somewhere in public view then it's vulnerable.

Sadly there is little you can do about either of these, as tracing the emails back to source is almost impossible, and even if they were traced there's almost no way of being able to figure out the origin of the harvester or malware.

Sorry I can't be more positive about it.

Dave

[michael8626]

Hi,

First time post, I have had the same problem this week.

System Delivery Notice failed for many emails, none of which I sent.

Foolishly I didn't change my password and now I cannot login! HELP.

Any advice? Who should I contact at BT?

Thanks in advance

Michael

[michael8626]

I also meant to say I think we recently had an email from BT regarding upgrade to office365 that has now been trashed(!)

I only login to this account though Outlook Web Access.

Would this upgrade email have had any instructions regarding account access? ie needing new passwords etc?

Would an email upgrade still allow me access via outlook web access?

I know this looks like negligence on my part (!) but any help would be gratefully received.

Thanks

Michael

[DaveA]

Hi Michael,

For any security issues with your account you can call our Customer Security Team on 0808 100 4332.  They'll be able to advise you on what you might need to do.

As far as normal access to the account is concerned you should still be able to log in through http://myoffice.bt.com unless your passwords have been changed by someone getting access to your account.

If that's the case then I would strongly advise contacting the Helpdesk as soon as possible.

And for further information on Office365 you can find out more here.

Dave