We have been dealing with spam issues at our small office for a few weeks now and need help.
Firstly, our outgoing emails were being blocked due to a low spam score according to our webhost co. The corrected that and that issue seemed to be resolved.
Then we found out that one of our emails and the domain was linked to 3 blacklisting sites. The legit outgoing traffic from our domain is fairly low (4 users sending about 20-30 emails daily). A week or so ago, he same user started to get flooded with spam mostly from sites where the subscriptions to the site were requested using our email address.
Today another user on our domain recieved a fake email that would seem to originate from the email address mentioned above but originated from firstname.lastname@example.org
We use kaspersky small office security and have turned on the spam filters with our webhost for our domain. The kaspersky spam addin was running into issues so we had it turned off a while ago.
Have changed email account passwords and will change them again but I suspect there is more to do. Plan to do this for everyone again and also run adwcleaner and full scans for all the desktops but I suspect there is more to do.
Any help from experts in this are would be helpful.
Edited by hamluis, 02 February 2017 - 10:10 AM.
Moved from MRL to Am I Infected - Hamluis.