Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Emails Hacked - sending invoice demands & fraudulent links to my contacts


  • Please log in to reply
5 replies to this topic

#1 DarrenTillbrook

DarrenTillbrook

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 14 August 2017 - 07:31 AM

Hi There

 

A few of my contacts have informed me that they have received emails from me which are requesting payments of invoices and putting links (which arent mine) to a website. The original emails sent do not appear in my sent emails box. i have attached the content of one of these emails below... (my email address is the gas-iow@hotmail.co.uk)

 

From: gas-iow@hotmail.co.uk <ylee@thisisalpha.com>
Date: 14 August 2017 at 11:17
Subject: Invoice number 165001 Notification
To: pam883155@gmail.com


Good Day ,


This is your invoice reminder.
Thank you for your business and we will appreciate your prompt payment.

Total amount due: £1271.35 14/08/2017.

Invoice.
http://doddlercon.com/FFUWW57/


Thank you in advance for your cooperation,

gas-iow@hotmail.co.uk



BC AdBot (Login to Remove)

 


#2 DarrenTillbrook

DarrenTillbrook
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 14 August 2017 - 08:12 AM

Dont know if its related but I just received this in my inbox from 

 

From - First4Spares - Amazon Marketplace <p6lgycnqqkq6w38@marketplace.amazon.co.uk>

subject line - Re: Copy Invoice 505589

 

------------- Begin message -------------

 

Sorry what are you after?

 

Kind regards

LewisOn Monday, August 14, 2017 at 10:14 AM, Gas Appliance Specialists wrote:

 

> For your security, Amazon removed parts of this message. Click here to learn more: http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=200389640

>

> ------------- Begin message -------------

>

> Hello First4Spares - Amazon Marketplace,

>

> This is your invoice reminder.

> Thank you for your business and we will appreciate your prompt payment.

>

> Amount due: £1847.81 14/08/2017.

>

> View And Pay Your Invoice Her.

> [link removed]

>

> Sincerely,

>

> [e-mail address removed]

>

> ------------- End message -------------

>

> For Your Information: To help arbitrate disputes and preserve trust and safety, we retain all messages buyers and sellers send through Amazon.co.uk. This includes your response to the message below. For your protection we recommend that you only communicate with buyers and sellers using this method.

>

> Important: Amazon.co.uk's A-to-z Guarantee only covers third-party purchases paid for through our Amazon Payments system via our Shopping Cart or 1-Click. Our Guarantee does not cover any payments that occur off Amazon.co.uk including wire transfers, money orders, cash, check, or off-site credit card transactions.

>

> We want you to buy with confidence whenever you purchase products on Amazon.co.uk. Learn more about Safe Online Shopping (http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=11081621) and our safe buying guarantee (http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=3149571).

>

 

>

 

>

>

>

 

--

 

[XSELL_8RFB7R8ZZQHEI]

 

 

 

------------- End message -------------

 

For Your Information: To help arbitrate disputes and preserve trust and safety, we retain all messages buyers and sellers send through Amazon.co.uk. This includes your response to the message below. For your protection we recommend that you only communicate with buyers and sellers using this method.

 

Important: Amazon.co.uk's A-to-z Guarantee only covers third-party purchases paid for through our Amazon Payments system via our Shopping Cart or 1-Click. Our Guarantee does not cover any payments that occur off Amazon.co.uk including wire transfers, money orders, cash, check, or off-site credit card transactions.

 

We want you to buy with confidence whenever you purchase products on Amazon.co.uk. Learn more about Safe Online Shopping (http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=11081621) and our safe buying guarantee (http://www.amazon.co.uk/gp/help/customer/display.html?nodeId=3149571).

 

 

 

[commMgrTok:A39GZN98AMJLZT]



#3 DarrenTillbrook

DarrenTillbrook
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 14 August 2017 - 08:47 AM

Also on an unrelated matter, could anyone tell me how to remove

 

/O=FIRST ORGANIZATION/OU=EXCHANGE ADMINISTRATIVE GROUP(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=00064000C92B5FAB

 

from my sent emails (this comes up in the From line instead of my email address)



#4 buddy215

buddy215

  • Moderator
  • 13,097 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:18 PM

Posted 15 August 2017 - 08:54 AM

It is most likely that the emails are not being sent from your account. It is likely the recipients are seeing an obfuscated sender name...yours.

The criminal sending those emails likely scraped your address from a website you posted it on or guessed the address. Your email user name

could of been gotten from the address book of someone who you have sent emails to and their address book has been compromised.

 

That usually stops after short time...one or two weeks...as recipients report as spam and the criminal's spam IP address gets blocked.

 

I've done a bit of searching on the "problem" mentioned in your last post....I found no solution...so, can't help with that. Which I'm sure you have

discovered the same through your searches.

 

You likely have taken the usual steps of changing your passwords, secret phrases and email addresses and phone numbers used to send you a

new password when you forget the password for your email account. If not, you need to do that as an extra precaution.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 DarrenTillbrook

DarrenTillbrook
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  

Posted 15 August 2017 - 03:31 PM

Thanks for your reply, I understand what you are saying, but how would the criminal send out emails to my contacts if they dont have my password or login information (as I have changed my password as you suggest). The other thing is annoying but I have not found how to resolve



#6 buddy215

buddy215

  • Moderator
  • 13,097 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:18 PM

Posted 15 August 2017 - 04:02 PM

Your address book or one of your friend's address book could of been compromised. During the first year of Facebook, a new member would

get an email confirming their membership and once it was opened, Facebook would harvest all the email addresses in that account and send

invites to join Facebook. I mention that as a possibility of something similar to of occur without you or one of your friends knowing that was happening.

 

Someone's Sending from My Email Address! How Do I Stop Them?! - Ask Leo!


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users