Security Basics mailing list archives

Re: Compromised email account?


From: Ben <sixtwelveohtwo () gmail com>
Date: Tue, 8 Feb 2011 15:09:23 -0800

Hey Jacob,

   While highly suspect, the notices do not necessarily mean your
account has been compromised. It is possible that they were not
actually sent by your service provider but were, instead, themselves
spam being sent to you (probably with a _phishing_ link somewhere in
them) by nefarious parties. It may also simply indicate that someone
was sending spam and falsifying your address as the sender so that
when these messages failed to send the errors were returned to you.

   That being said, I would reach out to your service provider and ask
them if they can help to identify the source of these. They should be
able to tell the last few addresses your account was accessed from (I
would hope) and let you verify that these were all, in fact, you.

   If your account was compromised, have the service provider reset
your credentials and begin the usual fire drill of hunting for malware
that could have picked up passwords before you log in with the new
credentials. As for maintenance in the future, I defer to years and
years of password maintenance articles and general internet security
threads that are readily available via Google (or your engine of
choice.) In short, use strong passwords, be smart with them, and run
*some* kind security software on your systems.

Cheers!



On Mon, Feb 7, 2011 at 7:14 PM, Jacob Bednarz <n.a.r.z.y () live com> wrote:
Hi,
After awaking this morning, I found my inbox riddled with failed delivery
notices from my service provider. Wierd thing is I haven't sent emails from
the address in weeks.
Does this mean my inbox has been compromised? If so, is there anything I can
do to reclaim it and maintain it without this issue occuring again?

Jacob.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: