Forum Thread

Mailer-Daemon returned mail I didnt send

pattisw 911 1,433 April 26, 2012 at 05:52 PM
This morning I got about 30 returned emails and then again this evening.Returned, but I did not send them.It looks like they are all from places I have emailed at some time in the past.How did this happen and how can I stop it?A few emails made it through because I got replies from places I didnt email. Kinda scary. Thanks for any advice

16 Comments

1 2

Sign up for a Slickdeals account to remove this ad.

#2
post the mail header to make sure your email address was really the source of sending those emails (not just reply-to address). Get the original IP address and email the administrator of the MTA server, and change the email account password.
Reply Helpful Comment? 0 0
#3
Just because something says that you sent it did not mean that you did. Someone sent it using your email address as the "from" so you get the bouncebacks. Happens all the time.
Reply Helpful Comment? 0 0
Speed does not kill. In fact speed never killed anyone. Suddenly becoming stationary that's what gets you. - Jeremy Clarkson, Top Gear S06E10

Intel i7 950 @ 4ghz | Corsair H80 | Gigabyte GA-X58-USB3 mobo | 18GB DDR3-1333 RAM | 4 x 2TB HD | Sapphire Radeon HD5770 w/3 monitors | Triple boot Lion/Win7/Fedora
Joined Jul 2003
L10: Grand Master
33,260 Posts
6,001 Reputation
#4
I had the same kind of issue with my yahoo email account...and lo and behold I looked at my actual sent items box and yes...they did come from my email account, but I did not personally send them.

I scanned my pc, etc...found nothing, but did use a known good clean pc to change my yahoo email address.

A family member sent me a link that they were concerned about and they did in fact send it to me...so I went to the site and it was a fake news site that had a fake story about getting a new job.

Didn't think anything about it at the time... but here is what I think happened.

Since my yahoo email was open at the time, the website harvested my yahoo email token and then used it again to then authenticate themselves and send dozens of emails to my contacts.

Grrrrr! Ranting

Talking about falling on my own sword...for an IT guy to have to send out "I got my email account hacked" really really sucked ass.

So OP do check your actual sent item box...and I'd also suggest that you change your email password
Reply Helpful Comment? 0 0
worshipTHANK YOU to those whom have fought and are fighting for our FREEDOMworship

Please Support Autism Awareness [autismspeaks.org]
Yahoo!Yahoo! 7/11/2009
Joined Jun 2007
L8: Grand Teacher
3,846 Posts
2,207 Reputation
#5
Just like regular postal mail. Where you put the From address, or the return too address. Someone can put whatever they want there. Their address, your address, a totally made up address. Just because someone put your address on a message doesn't mean you sent it.
Reply Helpful Comment? 0 0
Joined Aug 2005
L5: Journeyman
911 Posts
1,433 Reputation
Original Poster
#6
Thank you all for the info.
Reply Helpful Comment? 0 0
Joined Aug 2005
L10: Grand Master
12,661 Posts
4,824 Reputation
Pro
#7
Also worth mentioning you should probably change your email password too just in case.
Reply Helpful Comment? 0 0
Vague questions receive vague answers . . . . . .
Joined May 2004
L1138:DarthShopper
7,079 Posts
1,365 Reputation
#8
Quote from .DC. View Post :
...

Grrrrr! Ranting

Talking about falling on my own sword...for an IT guy to have to send out "I got my email account hacked" really really sucked ass.

So OP do check your actual sent item box...and I'd also suggest that you change your email password
I've had to do it twice now. And yes, I'm a techy, with AVG, firewalls, and use Firefox with all the goody plugins.
Reply Helpful Comment? 0 0
hug Dylan nod

DRM http://www.defectivebydesign.org/ vomit Mad EEK! LMAO


Quote by my daughter, Her Royal Princess Elizabeth Margaret: "If I was them cows, I'd run away!"

Sign up for a Slickdeals account to remove this ad.

#9
As an IT person as well, I second the suggestions of

A) thoroughly checking computer for infection (use AntiVirus prog, Malwarebytes, Spybot, and combofix)..a single program may not find all the infections. There are plenty of viruses/malware out there that distribute itself by sending links/attachments to everyone in your contacts in hope that they'll click the link/attachment and get infected as well...rinse and repeat.

B) change your password. You may want to keep an eye on any accounts/website where you use this same password.
Reply Helpful Comment? 0 0
I believe I've found the solution to obesity in America. Hemispherectomy....no one uses it anyway.
Joined Jul 2003
L10: Grand Master
33,260 Posts
6,001 Reputation
#10
Quote from faheyd View Post :
I've had to do it twice now. And yes, I'm a techy, with AVG, firewalls, and use Firefox with all the goody plugins.
Maybe it's just us Northern California Techies...Scratchchin
Reply Helpful Comment? 0 0
Joined Aug 2005
L10: Grand Master
12,661 Posts
4,824 Reputation
Pro
#11
Quote from AngryPirate View Post :
As an IT person as well, I second the suggestions of

A) thoroughly checking computer for infection (use AntiVirus prog, Malwarebytes, Spybot, and combofix)..a single program may not find all the infections. There are plenty of viruses/malware out there that distribute itself by sending links/attachments to everyone in your contacts in hope that they'll click the link/attachment and get infected as well...rinse and repeat.

B) change your password. You may want to keep an eye on any accounts/website where you use this same password.
#B Best practice security means each site uses a UNIQUE password. Smilie Lastpass is great for managing all of those random, long passwords.


I would also add that it is a good idea to remember to Sign Out of your email or other sites when done so that these tokens expire if they were copied they would be useless unless used while you were signed in.
Reply Helpful Comment? 0 0
#12
One possibility that I haven't seen mentioned but is related TheSwag's post is that someone with you in their address book is infected. They could unknowingly be sending out spam from random addresses in their address book, to random addresses in their address book.
Reply Helpful Comment? 0 0
--
Ahhhh! The Atmosphere!
Joined May 2004
L1138:DarthShopper
7,079 Posts
1,365 Reputation
#13
Quote from .DC. View Post :
Maybe it's just us Northern California Techies...Scratchchin
That may be true. I think the biggest failure on my fault is not using different passwords on ALL the different forums I belong to. I can't even remember my login names, let alone my passwords. WILL THERE EVER BE AN EASIER WAY for us 'users'?
Reply Helpful Comment? 0 0
Last edited by faheyd May 7, 2012 at 09:00 AM
#14
Sounds like you 'might' be infected with some malware or such that attempting to spam others in your address book...especially if you've clicked on links on Fakebook

If you haven't already, download and install these free security apps to do a security check (assuming your not on a MAC platform):

Malewarebytes Anti-Malware [malwarebytes.org]

Microsoft Safety Scanner [microsoft.com]

Microsoft Security Essentials [microsoft.com]

Norton Security Scan [symantec.com]
Reply Helpful Comment? 0 0
Last edited by boboli April 27, 2012 at 06:32 PM
Joined Jul 2006
CDI gave me free netflix!
50,347 Posts
10,948 Reputation
#15
Quote from .DC. View Post :
I had the same kind of issue with my yahoo email account...and lo and behold I looked at my actual sent items box and yes...they did come from my email account, but I did not personally send them.

I scanned my pc, etc...found nothing, but did use a known good clean pc to change my yahoo email address.

A family member sent me a link that they were concerned about and they did in fact send it to me...so I went to the site and it was a fake news site that had a fake story about getting a new job.

Didn't think anything about it at the time... but here is what I think happened.

Since my yahoo email was open at the time, the website harvested my yahoo email token and then used it again to then authenticate themselves and send dozens of emails to my contacts.

Grrrrr! Ranting

Talking about falling on my own sword...for an IT guy to have to send out "I got my email account hacked" really really sucked ass.

So OP do check your actual sent item box...and I'd also suggest that you change your email password
Why...are you using a YAHOO email account for any IT work?
Reply Helpful Comment? 0 0
Page 1 of 2
1 2
Join the Conversation
Add a Comment
 
Copyright 1999 - 2016. Slickdeals, LLC. All Rights Reserved. Copyright / Infringement Policy  •  Privacy Policy  •  Terms of Service  •  Acceptable Use Policy (Rules)  •  Interest-Based Ads
Link Copied to Clipboard