Chinese email
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- :
- Re: Chinese email
Chinese email
24-12-2018 10:48 AM - edited 24-12-2018 11:11 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Anyone else had a Chinese character email purporting to come from their own plus.com address?
The From address is my own.
The To address is similar to a password I use but not exactly the same.
I was also unable to access my PN account until I changed my password so it appears that my account was hacked..
Re: Chinese email
24-12-2018 12:30 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Have you checked the full headers to see if your address has been spoofed?
Unfortunately, there are lists stolen, by hacking, from retailers etc, which are bought by spammers who then send out phishing and other spam emails, usually spoofing the address that appears in the from line.
To see if your address is on one of these lists you can check here.
https://haveibeenpwned.com/
Some lists include passwords as well as addresses.
Full Fibre since September 2023
Mac OS14 and Firefox user with latest versions of both
Re: Chinese email
24-12-2018 12:40 PM - edited 24-12-2018 12:41 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Have you checked the actual full e-mail headers? - the From header can be set to anything by anyone, and it has no real connection to where it was sent from, so it probably wasn't sent from your e-mail address.
When you say the To address did you by any chance mean the Subject?
If so this sounds like one of the extortion e-mails (which in this case just happens to be in Chinese) doing the rounds where they claim to have recorded you visiting porn sites, and ask for bitcoin payment to delete the evidence. To make it more intimidating they e-mail you one of your real passwords that they have harvested from one of the data breaches over the past few years.
Check your e-mail address at https://haveibeenpwned.com - that will tell you if your e-mail address has appeared in any of the lists of hacked sites.
When you say your were unable to access yout PN account, just what do you mean? The webmail? Your online account?
Hacking your e-mail wouldn't allow anyone to change passwords, unless the passwords appeared in one of the e-mails that are currently on the system.
EDIT: I see I was beaten to it!
Re: Chinese email
24-12-2018 12:56 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Not easy on an iPad to check details but I forwarded it to PN fishing address and could see that the To address was the password name with my email address.
By To address I mean just that.
The powned site lists 6 but then it would as it’s pushing its software.
By PN account I mean the main account. I have another thread on the account/billing forum where you will see that I have changed the password twice today and must now do it again!
There is no question that both my email account and main account have been hacked.
PN don’t care either. In fact the person who answered my call earlier was downright unhelpful and rude.
Re: Chinese email
24-12-2018 1:07 PM - edited 24-12-2018 1:09 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Mardler wrote:
...
The powned site lists 6 but then it would as it’s pushing its software.
...
I don't think that is true. I have just checked one of my email addresses and it showed no breaches
Re: Chinese email
24-12-2018 1:12 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hi @Mardler, we take matters like this very seriously and would like to look in to this further. Could you respond to the PM I've sent over.
Thanks.
![](/skins/images/E0C9C3F46F001AC493DEF6A0AF7AF915/responsive_peak/images/icon_anonymous_message.png)
Re: Chinese email
24-12-2018 1:13 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
If the site is showing you have 6 breaches @Mardler you can take it that this is correct, and I'll bet one (or more) of them are for the account / password in question.
Re: Chinese email
24-12-2018 1:42 PM - edited 24-12-2018 1:44 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Mardler and @daveplus, yes, I check my several email addresses there every now and again, which is why I put in the link in my reply. Some of mine have been on the lists and others have not, which ties in with which addresses get regular spam.
Full Fibre since September 2023
Mac OS14 and Firefox user with latest versions of both
Re: Chinese email
24-12-2018 1:48 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@daveplus wrote:
@Mardler wrote:
...
The powned site lists 6 but then it would as it’s pushing its software.
...I don't think that is true. I have just checked one of my email addresses and it showed no breaches
I second this. I regularly check all mine these days after I started getting phishing emails. This correctly identified the pirated address. Since changing this one I currently get no problems, says he touching wood!
Moderator and Customer
If this helped - select the Thumb
If it fixed it, help others - select 'This Fixed My Problem'
Re: Chinese email
24-12-2018 1:54 PM - edited 24-12-2018 2:05 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Mardler wrote:
The powned site lists 6 but then it would as it’s pushing its software.
What software, 1 Password?
It's not their software.
HIBP is owned and operated by Troy Hunt, a highly respected security researcher, who funds his work mainly through donation and sponsorship.
Re: Chinese email
24-12-2018 3:22 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
DaveyH: yes, I discovered Tony H a few minutes ago though it looked as though he owned 1P.
Re: Chinese email
24-12-2018 3:25 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Cross posted from Account/Billing:-
One step closer.
A clearance of stored passwords in Chrome (I deliberately left that when deleting cookies etc.) cured the main account access problem and doing the same in Safari sorted that. You would have thought that inputting a new password would have overridden the stored one but it seems not.
All that remains is the Chinese email and the use of a password I have used a couple of times.
I am now happy to delete the email and close this topic.
All that remains is to wish everyone who responded a Merry Christmas and a Happy New Year. 😀
Re: Chinese email
24-12-2018 5:08 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Mardler regarding stored passwords, I use Firefox and if I change a password, a little box pops up asking if I want to save the changed password BUT it goes away if I don't answer quickly and then doesn't save it. (Haven't had to change any in Safari as I only use that when FF doesn't play nicely, and I don't use Chrome, so have no idea if there's anything similar in ether of those.)
Glad to see you've sorted it all out anyway and A Merry Christmas etc to you too.
Full Fibre since September 2023
Mac OS14 and Firefox user with latest versions of both
Re: Chinese email
24-12-2018 7:58 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Moderator's Note(s)
Thread locked in favour of https://community.plus.net/t5/My-Account-Billing/URGENT-Account-hacked/td-p/1600605 as most of the contents are duplicated there.
Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page