Help - Spam Email ?

Started by Roadkill, February 12, 2013, 09:37:01 AM

Previous topic - Next topic

Roadkill

I had an email through my Gmail account come through at 2:05 this morning . . . It was sent BY my Gmail account and says in the title "for y ou ****.******"

The "You" with a gap as shown.

Now I obviously didn't send it to myself and the message simply says that I (email address) "sent you a private message read it here" (with the "read it here" being a link).

Now what the F**k is this.  Has my Gmail been hacked or . . I don't know.

The message is also showing in my sent items . . .

When I hover over the link it's a long-winded link but has "tadixciho.com" in part of it ???

Actions ?

Cunning Plan

Sounds dodgy, unlikely your account has been hacked, probably a clever attempt at spoofing to make you click on the link to find out where the email has gone, THEN your account will be hacked.

IJP will probably have a better idea though.

For security:

Login to Gmail > Scroll down to bottom right corner > Last Account Activity, Details > Check for unknown locations + click Sign out of all other sessions.

Back to Gmail > Account (link top right corner) > Manage Security > Change password.

Whilst you are there ^^^^ It is worth turning on 2-step verification. This way, even if you TOLD me your password, I wouldn't be able to login without having your mobile phone as well.

I can't believe banks do not use that security method yet for online banking.
1968 VW T2 Bay Bus (currently being restored and upgraded)
1999 Jeep Cherokee XJ (modern classic daily driver)

Roadkill

Quoting: Cunning Plan
Login to Gmail > Scroll down to bottom right corner > Last Account Activity, Details > Check for unknown locations


Mobile    United Kingdom (86.159.167.30)         02:05 (12 hours ago)

I don't know a lot about IP's but this number is completely different to all the others shown next to the other "mobile" entries . . . .



Quoting: Cunning Plan
Back to Gmail > Account (link top right corner) > Manage Security


(EDIT)

Password changed.

I'll set-up the 2-step thing later on.  

Ta.

Cunning Plan

Quoting: Roadkill
Mobile    United Kingdom (86.159.167.30)    02:05 (12 hours ago)


Definite access there dude.

http://whatismyipaddress.com/ip/86.159.167.30\" target=\"_blank\" rel=\"nofollow\">http://whatismyipaddress.com/ip/86.159.167.30

Was you in Edenbridge this morning?

Sounds like it was hacked and they were prepping the account for more (easy password / one you use on other websites? - don't answer, just use a different one).

Although, once two-step is active, it should make it extremely difficult for someone else to get in. Not impossible, but many, many times more difficult.

1968 VW T2 Bay Bus (currently being restored and upgraded)
1999 Jeep Cherokee XJ (modern classic daily driver)

Roadkill

Feck !

And I thought my password was pretty strong !  

Cunning Plan

Quoting: Roadkill
Feck !


Hmm. Doesn't mean they were exactly there, it just means that was the computer location fingerprint that last accessed Gmail. They could have been using a proxy and browsing from behind that through the Edenbridge IP.

Quoting: Roadkill
And I thought my password was pretty strong !  


I told you to change it from cunningisawesome
1968 VW T2 Bay Bus (currently being restored and upgraded)
1999 Jeep Cherokee XJ (modern classic daily driver)

FUBAR

It's the time that we kill that keeps us alive...

Roadkill


ianjpage

Hmm, that is very strange, potentially a spoof, but could be a hack...

I'm always a little wary of Google's information on locations as if you're using your mobile to access email, it can be very wierd where it shows the IP address as being from....as it could bounce from mast to mast and router to router before it even gets to the 'net.

Defo worth a pwd change!!