Quote:
Originally Posted by stomachmonkey
Your email account got compromised, someone got access to your password. Could be from an old leak. People are creatures of habit and tend to reuse the same password over an over and rarely change them regularly. Even a decade old data leak can compromise you.
Here is what's happening.
They have set a rule in your online / web portal mail account, yes you have one, everyone does.
The rule moves all incoming mail into either spam or some folder other than your inbox.
They are monitoring that for emails from your contacts who are replying asking if what "you" just sent them is legit. They are replying yes to continue to spread their phising link.
They also typically will move all other mail back to your inbox so you are not aware anything odd is going on.
I've seen them run that on users for up to 2 weeks undetected.
You can scan your local machines all you want, the compromise is not there, it's in your web portal.
|
Somachmonkey. Are you saying I can change my security code and it won't make any difference? I changed it again erlier today. My emails are still going to my "conversation" instead of my Inbox. I tracked down the alias login. It's in Nigeria - of course. It shows the login location, operating system, browser and IP address. Anybody know what I can do with that info?