Re: Compromised email account?

[Omar Salvador Alcalá Ruiz <oalcala () scitum com mx>]

Is there a possibility of a keylogger retrieveng your pwd? Can we think of this being your personal email and not a 
corporate account? 

I may check the headers to see further what's going on......

is there by any chance the possibility of lending yourself this account due to the apparent lack of use to another 
"trusted" party?

> From what you say, you may have been targeted for that activity.

Regards

------Original Message------
From: Jacob Bednarz
To: Adam Pal
Cc: security-basics () securityfocus com
Subject: Re: Compromised email account?
Sent: Feb 9, 2011 05:12

Hi,
Thanks for all the feedback. It is greatly appreciated. I do not think  
it is a spoofing attack as I have items in my sent folder as well as  
drafts.

I also highly doubt it was because of a weak password. My password was  
14 characters and consisted of upper case and lower case aplhanumeric  
characters and wasn't based on a dictionary word. I have always been  
very careful with passwords and usernames.

Jacob.

On Feb 9, 2011, at 21:59, Adam Pal <pal_adam () gmx net> wrote:

> Hello Jacob,
>
> You could ask some logs or evidence from your provider (i doubt they  
> will do).
> However SMTP is not very secure, i.e. if send without authentication  
> is accepted
> the FROM is falsified the server will reply to the FROM.
>
>
> -- 
> Best regards,
> Adam Pal
>
> Tuesday, February 8, 2011, 4:14:10 AM, you wrote:
>
> <==============Original message text===============
> JB> Hi,
> JB> After awaking this morning, I found my inbox riddled with failed
> JB> delivery notices from my service provider. Wierd thing is I  
> haven't
> JB> sent emails from the address in weeks.
> JB> Does this mean my inbox has been compromised? If so, is there  
> anything
> JB> I can do to reclaim it and maintain it without this issue occuring
> JB> again?
>
> JB> Jacob.
>
> JB>  
> --- 
> ---------------------------------------------------------------------
> JB> Securing Apache Web Server with thawte Digital Certificate
> JB> In this guide we examine the

------Original Message Truncated------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------