Printable Version | Subscribe | Add to Favourites
New Topic New Poll New Reply
Author: Subject: Someone's hijacked my email account?
Guinness

posted on 18/2/07 at 05:12 PM Reply With Quote
Someone's hijacked my email account?

Can any computer geniuses help me out?

I have my own domain name, which was registered with freenetname, but has now transfered to madasafish.

For the last six weeks I get 30-40 emails a day, from other peoples email servers, saying "returned mail" or "delivery status failed" etc etc. Most of them appear to have attachements with them, so they get deleted straight away. The few that haven't had attachements and I have opened say "your email contained a virus and was sent from myatzsv@mikecookson.co.uk or some other random email address on my domain"!

I have phoned and emailed madasafish who suggested I turn off my master email account. I did this and didn't get any emails at all for about 2 weeks. First day I turn it back on I get the returned messages again.

I have a current subscription to McAfee and it says my machine is clean. I have even taken to un plugging my machine from the phone socket when I'm at work and I still get the messages when I get home.

HELP

Mike






View User's Profile View All Posts By User U2U Member
wilkingj

posted on 18/2/07 at 05:15 PM Reply With Quote
Yep, I get the same with my domain name. I just bin them, as I havent got the time to chase them through.






1. The point of a journey is not to arrive.
2. Never take life seriously. Nobody gets out alive anyway.

Best Regards
Geoff
http://www.v8viento.co.uk

View User's Profile E-Mail User Visit User's Homepage View All Posts By User U2U Member
SDS7

posted on 18/2/07 at 05:24 PM Reply With Quote
It most likely that they are using your domain as the senders origin. Its so that you get the returned to sender mails. They don't even have to get any of your details just the domain name. It a common problem with the email system at anyone can impersonate anyone else. Use specific e-mail accounts and turn off your catch all account. That's all you can do until they use someone else's domain name.
I get the same problem from time to time.

View User's Profile E-Mail User Visit User's Homepage View All Posts By User U2U Member
ecosse

posted on 18/2/07 at 05:28 PM Reply With Quote
Your SMTP service might be getting spammed, do you send outbound mail go through your domain (i.e. your mail clients send settings will say something like smtp.mikecookson.co.uk for outbound mail), and if so, does it require authentication to send?
If it does then change the password to start with and see if that reduces the NDR's you are seeing,

Cheers

Alex

View User's Profile View All Posts By User U2U Member
Catpuss

posted on 18/2/07 at 05:48 PM Reply With Quote
Its a common one. They are using your domain/email address as the sent from in the email so you get the anti spam attacks/FOAD messages.

Soemone described it to me as, they address the envelope to the recipient but put your address on the letter head.

View User's Profile View All Posts By User U2U Member
Guinness

posted on 18/2/07 at 05:55 PM Reply With Quote
Thanks guy's

turned off my catch all accounts and changed my passwords.

will see if that helps.

didn't want to end up in court in america accused of sending tonnes of spam!

thanks

mike






View User's Profile View All Posts By User U2U Member
scottc

posted on 18/2/07 at 09:48 PM Reply With Quote
Hi Mike,

The problem is that originally with SMTP there is no way to verify who the email is from. Its possible to spoof anyones email address, to make emails appear to be from that person.

unfortunately theres not much you can do about it.

If you look at the error messages you receive you should be able to determine where they were sent from.

View User's Profile View All Posts By User U2U Member

New Topic New Poll New Reply


go to top






Website design and SEO by Studio Montage

All content © 2001-16 LocostBuilders. Reproduction prohibited
Opinions expressed in public posts are those of the author and do not necessarily represent
the views of other users or any member of the LocostBuilders team.
Running XMB 1.8 Partagium [© 2002 XMB Group] on Apache under CentOS Linux
Founded, built and operated by ChrisW.