(Is a virus\u00a0sending emails from your account? Click here for\u00a0a free trial of\u00a0Mac Internet Security X8 for\u00a0protection from malware and viruses.<\/a><\/strong>)<\/h4>\nIf the problem is poor password hygiene, that means your account was hacked. Or your account has been spoofed, in which case someone has made it appear as if it’s been hacked.<\/p>\n
![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2013\/01\/spam-email.png\" "\\"spam-email\\"")
A spam email one of Intego’s employees received from her friend just this morning.<\/p><\/div>\n
There are a number of reasons that can explain how your account got hacked:<\/p>\n
\n- Your password was easily guessable<\/li>\n
- You entered your credentials into a phishing site<\/li>\n
- The website where you had your account had a security breach<\/li>\n
- Your hacked account used the same password as a different, breached site<\/li>\n
- There is spyware on your computer<\/li>\n<\/ul>\n
You can tell if your account has been hacked if:<\/p>\n
\n- The recipients of the spam-email includes a bunch of people you know<\/li>\n
- You try to access your account and the password no longer works<\/li>\n
- You try to access the \u201cForgot Password\u201d link and it does not go to the expected email<\/li>\n
- Your Sent Items folder contains a bunch of spammy emails you\u2019re not aware of sending<\/li>\n<\/ul>\n
(I\u2019m assuming, of course, that you didn\u2019t have a brain-spasm and temporarily misremember your account, or you didn\u2019t have way too many drinks on Friday night before drunk-emailing your friends.)<\/p>\n
If your account was in fact hacked, there are a few things you\u2019ll need to do:<\/p>\n
\n- You need to change your password on the hacked site<\/li>\n
- You need to change your password on any other sites where you used the same username and password<\/li>\n
- You need to change your password on any sites whose information you stored in the hacked account<\/li>\n
- If you determine that you have been affected by spyware, once it\u2019s removed, you will need to change all your passwords for all your online accounts and follow procedures for recovering from identity theft<\/a><\/li>\n
- If you cannot follow any of these steps because your account details have been changed, you will need to contact support for the website that provides your account so that you can regain control<\/li>\n<\/ul>\n
There are two main ways to see if your account was spoofed:<\/p>\n
\n- Get a copy of the email, including headers, and check the originating IP address<\/a> to see if it was not one you could have been using<\/li>\n
- If you\u2019re receiving bounce messages from a bunch of email addresses for people you\u2019ve never heard of<\/li>\n<\/ol>\n
If your account was spoofed, they simply created an email that had fake details (usually the \u201cFrom\u201d or \u201cReply-to\u201d address), and there is very little you can do to stop this. And what you can do is likely to be ineffective. In short, you\u2019ll need to do the following:<\/p>\n
\n- Take the IP address from the email header<\/li>\n
- Contact the ISP for that address<\/li>\n
- Ask them to block it<\/li>\n<\/ol>\n
However, the spammer could be using a different IP address the next day, and the ISP could either ignore or deny your request (especially if the ISP is a shady one).<\/p>\n
This is one of those cases that reminds us computer security is not just about protecting your machine from malware. There is a lot of data on your machine that is valuable to hackers, and attackers don\u2019t necessarily have to go to the trouble of creating malware to get it from you. But the good news is, it can also be fairly easy to protect yourself by making a few simple improvements. Stay tuned \u2013 in a future article, we\u2019ll talk about more ways you can protect yourself against common computer security hassles.<\/p>\n
\n
\n\nProtect your Mac against malware, strangers, and suspicious applications with Intego\u2019s award-winning\u00a0Mac Internet Security X8<\/a><\/strong>.<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"It\u2019s an event that we\u2019ve probably all dealt with at one point or another, either on the sender’s or the receiver’s end: an email that clearly didn\u2019t come from the person who supposedly sent it, hawking weight-loss supplements or \u201cmale enhancement\u201d pills or some such nonsense. What causes these, and what can you do about […]<\/p>\n","protected":false},"author":6,"featured_media":10149,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[10,151],"tags":[275,124],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n
A spam email one of Intego’s employees received from her friend just this morning.<\/p><\/div>\n
There are a number of reasons that can explain how your account got hacked:<\/p>\n
- \n
- Your password was easily guessable<\/li>\n
- You entered your credentials into a phishing site<\/li>\n
- The website where you had your account had a security breach<\/li>\n
- Your hacked account used the same password as a different, breached site<\/li>\n
- There is spyware on your computer<\/li>\n<\/ul>\n
You can tell if your account has been hacked if:<\/p>\n
- \n
- The recipients of the spam-email includes a bunch of people you know<\/li>\n
- You try to access your account and the password no longer works<\/li>\n
- You try to access the \u201cForgot Password\u201d link and it does not go to the expected email<\/li>\n
- Your Sent Items folder contains a bunch of spammy emails you\u2019re not aware of sending<\/li>\n<\/ul>\n
(I\u2019m assuming, of course, that you didn\u2019t have a brain-spasm and temporarily misremember your account, or you didn\u2019t have way too many drinks on Friday night before drunk-emailing your friends.)<\/p>\n
If your account was in fact hacked, there are a few things you\u2019ll need to do:<\/p>\n
- \n
- You need to change your password on the hacked site<\/li>\n
- You need to change your password on any other sites where you used the same username and password<\/li>\n
- You need to change your password on any sites whose information you stored in the hacked account<\/li>\n
- If you determine that you have been affected by spyware, once it\u2019s removed, you will need to change all your passwords for all your online accounts and follow procedures for recovering from identity theft<\/a><\/li>\n
- If you cannot follow any of these steps because your account details have been changed, you will need to contact support for the website that provides your account so that you can regain control<\/li>\n<\/ul>\n
There are two main ways to see if your account was spoofed:<\/p>\n
- \n
- Get a copy of the email, including headers, and check the originating IP address<\/a> to see if it was not one you could have been using<\/li>\n
- If you\u2019re receiving bounce messages from a bunch of email addresses for people you\u2019ve never heard of<\/li>\n<\/ol>\n
If your account was spoofed, they simply created an email that had fake details (usually the \u201cFrom\u201d or \u201cReply-to\u201d address), and there is very little you can do to stop this. And what you can do is likely to be ineffective. In short, you\u2019ll need to do the following:<\/p>\n
- \n
- Take the IP address from the email header<\/li>\n
- Contact the ISP for that address<\/li>\n
- Ask them to block it<\/li>\n<\/ol>\n
However, the spammer could be using a different IP address the next day, and the ISP could either ignore or deny your request (especially if the ISP is a shady one).<\/p>\n
This is one of those cases that reminds us computer security is not just about protecting your machine from malware. There is a lot of data on your machine that is valuable to hackers, and attackers don\u2019t necessarily have to go to the trouble of creating malware to get it from you. But the good news is, it can also be fairly easy to protect yourself by making a few simple improvements. Stay tuned \u2013 in a future article, we\u2019ll talk about more ways you can protect yourself against common computer security hassles.<\/p>\n
\n
\n\nProtect your Mac against malware, strangers, and suspicious applications with Intego\u2019s award-winning\u00a0Mac Internet Security X8<\/a><\/strong>.<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
It\u2019s an event that we\u2019ve probably all dealt with at one point or another, either on the sender’s or the receiver’s end: an email that clearly didn\u2019t come from the person who supposedly sent it, hawking weight-loss supplements or \u201cmale enhancement\u201d pills or some such nonsense. What causes these, and what can you do about […]<\/p>\n","protected":false},"author":6,"featured_media":10149,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[10,151],"tags":[275,124],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n
- If you\u2019re receiving bounce messages from a bunch of email addresses for people you\u2019ve never heard of<\/li>\n<\/ol>\n
- If you cannot follow any of these steps because your account details have been changed, you will need to contact support for the website that provides your account so that you can regain control<\/li>\n<\/ul>\n