A8 Parts Forum

A8 Parts Forum (https://forum.a8parts.co.uk/index.php)
-   IT, AV and other Tech (https://forum.a8parts.co.uk/forumdisplay.php?f=79)
-   -   Email oddity (https://forum.a8parts.co.uk/showthread.php?t=13584)

Conan_the_Librarian 6th November 2017 08:41 PM

Email oddity
 
I recently received an email from my mother. It was opviously spam. Her email account had been compromised, probably by a Trojan. The effect is since that point any legitimate emails I get that I reply to go to a different address
martinlock594@yahoo.com

If I reply to any emails prior to the spam it goes to her proper email. Any subsequently it goes to the one above. Looks like her email client is still compromised.

What should I do?

TIA

CtL

HPsauce 6th November 2017 09:05 PM

Mike, it may not be compromised at all, just the name "harvested" from almost anywhere - a list that has been compiled automatically is a most likely source.
Emails can be made to appear as if they have come from anywhere you like.

If you're interested to find out more have a look at the (usually hidden) email headers (if you can), that might indicate if they really came from her system, but typically it won't have.

steamship 6th November 2017 10:35 PM

Mike, if I'm reading this correctly, is this ONLY for emails to your mother?

If so, then you might want to check your mothers details in your contacts. In addition to what Andrew said, it is also possible to change the reply address as well, and this spam email you received may have changed it.

You won't see this when you're just replying to your mum, so you need to go into your contacts and check the 'Reply To' (or similar) field, which will more than likely have the 'martin' address. If so, change it back to the proper address and save it.

PsYcHe 6th November 2017 11:01 PM

It's particularly an issue if you use outlook on the desktop, as it saves the contact details for a quick lookup. When the little box appears with the name as you type it in, see what it says, if I remember correctly, you can clear the 'remembered' version with a right click.

Conan_the_Librarian 8th November 2017 08:29 PM

Guys,
Thanks for the advice. The Trojan had indeed change Ma's reply-to address to the one in my post. All being sorted now. +++


All times are GMT. The time now is 07:15 PM.

Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.