Hacked mail

[Andy Burns]

the spammer is making no attempt to claim their address is anything other than an indonesian one

hannahthe***@onigiri.co.id

the only yahoo address there is in the message is

hannahthe****@yahoo.com

however they've set the descriptive part of the send to

"Hannah ****"

which presumably matches your daughter, and obviously they know your demon address is one she has corresponded with previously, so they know who to spam

She (like almost every yahoo email user I know) clearly had her accounted hacked and details hoovered from it at some time in the past.

clearly the emails you've received so far have been easy to spot, not much you can do but keep a suspicious eye on them, or encourage her to change email provider.

[Richard]

Some folk are just too impatient.

[Tim Lamb]

Would simply changing her Yahoo address help?

OK So far.

Does anyone know if the link was dangerous?

The initial giveaway was the extra v in her mail address but T'bird had flagged it as *junk* anyway.

>

[Tim Lamb]

Quite! The full story is that hid daughter is now at home with children and wants to take up picture framing.

Apart from a brush down, all I have actually done so far is to set about repairing the one it replaced.

>

[Tim Lamb]

In message <231220192057454995% [e-mail], Tim Streater [e-mail] writes

Hmm.. could it just be innocuous spam?

>

[John Rumm]

Ta, [snip]

ok, that is just a straight spoof - and not a very good attempt either - it makes no attempt to hide its actual origin and even the from address is not disguised in any way. (which ironically improves its chances of successful delivery)

It definitely did not originate from Hannah's yahoo account. So all the spammer would need to send that message are the email addresses "to" and "from".

Having said that, if you visit

and enter Hannah's real email address, then (assuming I have un-munged it correctly), it appears in 12 databases of compromised addresses (i.e. the email address and other details have been breached from compromised web sites in the past). So if any of these hacked sites revealed password details (almost certainty), and the same details were used for things like her Yahoo account, then you will need to assume that is also compromised, and the email addresses contained therein also made public, along with any other sensitive content in the emails)

(Moral of that story, never re-use passwords between sites, no matter how insignificant you feel them to be).

BTW, if want something to help analyse headers for you, MS have a tool here:

Regarding potentially dangerous links in messages, go to:

and paste them into the URL scanner. It will firstly unravel any URL minimisations and find the actual target address, it will then scan what it find there and give a report without you needing to access the site yourself.

[John Rumm]

If only you had a working workbench huh :-)

[T i m]

<snip>

Whilst I generally don't, I was wondering if you could recommend a free (ideally) password manager that would sync between Android and Windows?

I don't necessarily need many other features (like autofill or password generator) just that it's good at what it needs to do?

Cheers, T i m

[John Rumm]

Firefox will do that now...

Some folks quite like commercial solutions like Dashlane.

[Tim Lamb]

Thanks for this John.

She will be here over Christmas and can experiment.

[Tim Lamb]

Ha. Up and running. I had to chop out and relay a section next to the vice. Hollowed by chopping sticks.

I suspect my grandfather acquired this one when he retired as a village school head. It is about 3" short of the other ( 32.5") and now stands on 3" feet.

[T i m]

<snip>

Thanks, that seems to work. ;-)

Cheers, T i m