I need some pro nerd advice on a situation that just developed. Looks like one of my family member's email account has been compromised.
Someone must have pulled his address book and is now sending emails to all contacts. The emails are not coming from the yahoo account rather than spam servers using the same user name and first name / signature line, making it look like it comes from my family member.
The emails going out have links in them and now of course another family member receiving this spam clicked on the link but got a 404 error message. The link looked like this (I put some asterisks not to have a live link).
http://*******.ca/including.php?send=******eca8g39hm
What does that link do? Was it really a legit 404 response or was something else going on in the background? What do these spam emails do, if they aren't pitching a male enhancement product?
What do I need to do to protect the family members? The spoofed yahoo account has its password reset already. What does the family member recipient that clicked on the link have to do?
Thanks!
George