email account hacked. please help

[webJockey]

I have a yahoo email account that seems to be hacked. Following are hacking activities I have noticed.

1) Spam emails being sent from my account to my account and my recovery email account.
2) Recent emails in inbox are missing
3) New emails in deleted mails folder

I have reset passwords for both my email account and recovery email account and also re-installed my mac but still spam emails are being sent from my account to my account and my recovery email account.

My mac was not even turned on when those emails were being sent. No one else knows my password. I do access mail from my iphone and ipad too.

Its my primary email account please help.

Thanks

 

[BarbaricSoul]

when you changed your passwords, did you select the "log me out of everywhere" option?

 

[webJockey]

no. there was not such

 

[BarbaricSoul]

oh, they changed it, did you review the "Manage App and Website Connections" options?

 

[DRDNA]

If you are using a Android or Ios ...ect. to check email (cell phone or even a tablet) then the breach is probably from this. If indeed this is true then it was probably an app that you installed that is doing it or it is snatching your PW....If you are using such a devise try to remove the account from the mobile device and then change your PW and see if it still gets hacked.

PW=password

Good luck!

 

[webJockey]

I just reviewed it now and had few yahoo things there. removed first one and it removed all. Then changed password again. Not sure how to attach a photo here

 

[BarbaricSoul]

Not sure how to attach a photo here

basically, you just take and save a screen shot, upload it to a free image hosting website(TPU does free image hosting under the "more" link on the home page), and post the link to the hosted image using the

tags

 

[webJockey]

image

 

[webJockey]

Thanks BarbaricSoul, just uploaded one

 

[BarbaricSoul]

Thanks BarbaricSoul, just uploaded one

TPU has an app for that

 

[webJockey]

what else should I do? how to recover missing emails?

 

[BarbaricSoul]

Don't think you can if they were deleted from your email account and are not in your trash folder. Try contacting Yahoo, explain what happened, and see what they can do or suggest you do.

 

[TheMailMan78]

Also may I suggest you change email accounts to one of the following.....

Gmail
Outlook

The reason is they both use "Step two verification". This style of verification means even if a hacker gets your password they cannot log in to your account. You see every time someone try's to log in that hasn't been verified you will get a text or a phone call giving you a final code to log in. Its very easy and simple to setup also. The great thing is once you setup your Email application with a specific "application password" from that account you never have to log in again AND your account is protected from being logged in from foreign entities.

I like the new outlook personally however Gmail is also damn good. Gmail also has an IP tracker that allows you to see WHERE the account has been logged in from. Anyway let us know if you wanna change over and have any questions. We will be happy to help and welcome to TPU!

 

[webJockey]

Thanks MailMan78. Just did what BarbaricSoul said but I am still receiving spam from my own account, don't know what to do. I have contacted yahoo about issue and to restore my emails. Also now yahoo offers "Step two verification"

 

[remixedcat]

I had the same thing constantly happen to my yahoo email account. It happened 6 times and I use extreme passwords of doom. They used to have a wider password character limit, however since that one blank took over the limit was shortened so that makes them extremely easy to guess and I had an older account that had an odd length and they made me change it.

it seems this new blank running it cares more about looks and image rather then security and user experience.

 

[webJockey]

I am completely F***d now. My account is locked. I cant get in. Cant even reset password online.

Here is the message Header of spam email. I have replaced my email address with "From MY EMAIL address"

----------------------------------

"From MY EMAIL address" Sat Oct 12 02:07:17 2013
X-Apparently-To: MY EMAIL address via 98.136.215.127; Sat, 12 Oct 2013 01:51:03 -0700
Return-Path: <babiesfe993@primetap.com>
X-YahooFilteredBulk: 183.177.99.102
Received-SPF: none (domain of primetap.com does not designate permitted sender hosts)
X-YMailISG: vWrHl30WLDu7wAmmBPTQWSgjfkLp4YRO5fROV6U3Fdei8M75
ljrGyjj_6rEzHWe7i._ISsOUmbeLORiLko7VeLNNHjn.gfMUA67xIsjVX5n8
DmaU1rz4H1FOKIf8lbEFHDZ6Ln4N2z6MTg5fCalNZAankgumREteWrXZN0YE
gV5Y0c8N0A919VDYZxbo701qqS3aRwV4Lybz0W42Mu8R7jqyAxYtvME7xp3f
kEZ78k5vIfJZMmRVNhA0BdimfJW3UwRGWqDgTPbwVb7MOSbq8uHaJ7b.1Oz.
KrJu2S1bxRu.ZDmUNn2UrVvTIQ0ILnQkVQcc.qnT6zNuFNEJuXVq_au28a1W
grUgOCkjDdTRPWfwVfDGK_sOjMseNgp4_nAYk2Kj6HTEQB8W4Sg3AvmBNq5q
SjMhYysy0z5Kp.7MPoxty2hBAUXXskSWLP.F0Po0eSrYJLu7Gp3gjT08BVcU
rgq1lzv0pm5RUWhpIb3T_t5Z2bLZuxQvk6I20xD2.E79yv8fgVHvd8pq3KoS
JlFGJVUK77XlM3ZUELd8hefyRqY94A.R7VbmGbNAjJJy8bYID3oX8ZINXe9g
6TrB03342yzlfmAg5oPV_bnU5bZCJX4Q76HMnKXOP0_xjUIT01pn8oPxvjN5
rHZiXXCB6e.8ARMmO0.ezNYK1OKgngSTXuo_EwuK2BnCE2VbriAPUsLK0c53
Y8te3JQAlOOBv.U4ChZjHy6NG6w1mD4nh.isII0mfaqcMehIOmFCZa6pQSAe
BrF5BMjLeCfvAvPhS5WEcE.q1KS62HV0AHqpJpk.ZXzb1groHubcL26kXFVI
KbMXCldqWKMUTyMSm0tN9iCfQM7Vt3ceynY1Mkv7DNZ_W2fpo0yn3qEbp9uv
V114VqGiON6E8DHOhZjTcJzF54BF77knV4BASLsSutvGBTqaeNNI4qaBIFhC
TA6E4x1c8FugyihE5v21XHWAnEeITaUWIgUkWD1Wze10bFrLcfVE48n3BiKr
fpvAce39.QTDSkxD7cGv50ZJhYmc8ca5NXVG3VDzsKwIpdYnxXnd8bLiiLh0
577t6OEPGlZveKY4FjjJwvrvCoklusuuOoB4x7sv_7FbMuYr9g47imVTc3Ma
Q7ePehmjLoKcQhBN7JVmykfFIe3EWzTDOx9bzlaz1QMGzoggr1IwVQBu6.uC
DKEZd4EPly.GwQ--
X-Originating-IP: [183.177.99.102]
Authentication-Results: mta1029.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO 183.177.99.102) (183.177.99.102)
by mta1029.mail.bf1.yahoo.com with SMTP; Sat, 12 Oct 2013 01:51:02 -0700
Received: from 183.177.99.102(helo=yahoo.com)
by yahoo.com with esmtpa (Exim 4.69)
(envelope-from )
id 1MMR42-0195ac-Q2
for <ash_gurpreet@yahoo.com>; Sat, 12 Oct 2013 17:07:17 +0800
From: <MY EMAIL address>
To: <MY EMAIL address>
Subject: Penis pills
Date: Sat, 12 Oct 2013 17:07:17 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Mailer: krqfguqrep.01
Message-ID: <6648291826.2IYV3KMD956077@gxyhajtxhqz.poqhnat.tv>
Content-Length: 136

"

 

[Fourstaff]

Try to contact Yahoo and see how it goes. We can't really fix anything from here at this point.

 

[TheMailMan78]

Also now yahoo offers "Step two verification"

Then I suggest you use it.

 

[alexstone]

Scan your machine for keyloggers availability

 

[AsRock]

Change password on anotheer computer or betteer still a freesh copy of the OS then email Yahoo! about the issue and i am sure they will find out how it's happening if you don't..

Either way better tell them before you get a banned account and at least this way you look more like a good guy than a bad one.

 

[Kaynar]

1) Spam emails being sent from my account to my account and my recovery email account.
2) Recent emails in inbox are missing
3) New emails in deleted mails folder

Unfortunately thats the Yahoo!'s server being hacked directly, not your own PC or account. I've had this problem with yahoo! 6 times in 1 year now. I'm going to change mail, this bs is a joke their security is amateurish.

One time I even kept spamming my self as u describe in 1) the next day after I changed the password on my account using a computer with proffesional-grade Kaspersky antivirus for companies. Since then I have ruled out the possibility of this being my own fault.

 

[ShiBDiB]

No one has stated the obvious.. get rid of the email and change your emails on all major sites..

Yahoo is junk anyway

 

[remixedcat]

Yahoo will not contact you back. They never have for me nor my sis and she got hacked 4 times.

Not once did she ever get a response they don't care.

 

[AsRock]

Unfortunately thats the Yahoo!'s server being hacked directly, not your own PC or account. I've had this problem with yahoo! 6 times in 1 year now. I'm going to change mail, this bs is a joke their security is amateurish.

One time I even kept spamming my self as u describe in 1) the next day after I changed the password on my account using a computer with proffesional-grade Kaspersky antivirus for companies. Since then I have ruled out the possibility of this being my own fault.

Well i neveer had the issue with yahoo and i been using it for 12 years now.. Although i am always careful who has it aand how i use it, for example if i go to my yahoo mail i never go to other sites without closing the browser 1st s this is another way you shit gets taken i all so block ll none yahoo ads too..

 

[KainXS]

the guy who started it is gone but don't use yahoo people, yahoo = hacked for many people(including me), and yep they won't contact you.