cancel
Showing results for 
Search instead for 
Did you mean: 

Chinese email

Mardler
Rising Star
Posts: 525
Thanks: 19
Registered: ‎01-07-2012

Chinese email

Anyone else had a Chinese character email purporting to come from their own plus.com address?

The From address is my own.

The To address is similar to a password I use but not exactly the same.

I was also unable to access my PN account until I changed my password so it appears that my account was hacked..

 

13 REPLIES 13
Mad_Moggies
Community Veteran
Posts: 1,255
Thanks: 39
Registered: ‎01-08-2007

Re: Chinese email

Have you checked the full headers to see if your address has been spoofed?
Unfortunately, there are lists stolen, by hacking, from retailers etc, which are bought by spammers who then send out phishing and other spam emails, usually spoofing the address that appears in the from line.
To see if your address is on one of these lists you can check here.
https://haveibeenpwned.com/
Some lists include passwords as well as addresses.

Plusnet user since November 2003
Unlimited Fibre Extra and Unlimited UK & Mobile Calls
Mac OS11 and Firefox user with latest versions of both
corringham
Seasoned Pro
Posts: 550
Thanks: 278
Fixes: 5
Registered: ‎25-09-2015

Re: Chinese email

Have you checked the actual full e-mail headers? - the From header can be set to anything by anyone, and it has no real connection to where it was sent from, so it probably wasn't sent from your e-mail address.

When you say the To address did you by any chance mean the Subject?

If so this sounds like one of the extortion e-mails (which in this case just happens to be in Chinese) doing the rounds where they claim to have recorded you visiting porn sites, and ask for bitcoin payment to delete the evidence. To make it more intimidating they e-mail you one of your real passwords that they have harvested from one of the data breaches over the past few years.

Check your e-mail address at https://haveibeenpwned.com - that will tell you if your e-mail address has appeared in any of the lists of hacked sites.

When you say your were unable to access yout PN account, just what do you mean? The webmail? Your online account?

Hacking your e-mail wouldn't allow anyone to change passwords, unless the passwords appeared in one of the e-mails that are currently on the system.

EDIT: I see I was beaten to it!

Mardler
Rising Star
Posts: 525
Thanks: 19
Registered: ‎01-07-2012

Re: Chinese email

Not easy on an iPad to check details but I forwarded it to PN fishing address and could see that the To address was the password name with my email address.

By To address I mean just that.

The powned site lists 6 but then it would as it’s pushing its software.

By PN account I mean the main account. I have another thread on the account/billing forum where you will see that I have changed the password twice today and must now do it again!

There is no question that both my email account and main account have been hacked.

PN don’t care either. In fact the person who answered my call earlier was downright unhelpful and rude.

daveplus
Pro
Posts: 553
Thanks: 122
Fixes: 7
Registered: ‎25-08-2010

Re: Chinese email


@Mardler wrote:
...

The powned site lists 6 but then it would as it’s pushing its software.

...

I don't think that is true. I have just checked one of my email addresses and it showed no breaches

HarryB
Community Gaffer
Community Gaffer
Posts: 5,178
Thanks: 1,455
Fixes: 254
Registered: ‎25-03-2015

Re: Chinese email

Hi @Mardler, we take matters like this very seriously and would like to look in to this further. Could you respond to the PM I've sent over.

 

Thanks.

If this post resolved your issue please click the 'This fixed my problem' button
 Harry Beesley
 Plusnet Infrastructure Operations Professional
Anonymous
Not applicable

Re: Chinese email

If the site is showing you have 6 breaches @Mardler you can take it that this is correct, and I'll bet one (or more) of them are for the account  / password in question.

Mad_Moggies
Community Veteran
Posts: 1,255
Thanks: 39
Registered: ‎01-08-2007

Re: Chinese email

@Mardler and @daveplus, yes, I check my several email addresses there every now and again, which is why I put in the link in my reply. Some of mine have been on the lists and others have not, which ties in with which addresses get regular spam.

Plusnet user since November 2003
Unlimited Fibre Extra and Unlimited UK & Mobile Calls
Mac OS11 and Firefox user with latest versions of both
Baldrick1
Seasoned Hero
Posts: 5,989
Thanks: 2,648
Fixes: 177
Registered: ‎30-06-2016

Re: Chinese email


@daveplus wrote:

@Mardler wrote:
...

The powned site lists 6 but then it would as it’s pushing its software.

...

I don't think that is true. I have just checked one of my email addresses and it showed no breaches


I second this. I regularly check all mine these days after I started getting phishing emails. This correctly identified the pirated address. Since changing this one I currently get no problems, says he touching wood!

DaveyH
Champion
Posts: 1,946
Thanks: 466
Fixes: 12
Registered: ‎15-11-2012

Re: Chinese email


@Mardler wrote:

 

The powned site lists 6 but then it would as it’s pushing its software.


 

What software, 1 Password?

 

It's not their software.

 

HIBP is owned and operated by Troy Hunt, a highly respected security researcher, who funds his work mainly through donation and sponsorship.

 

 

Mardler
Rising Star
Posts: 525
Thanks: 19
Registered: ‎01-07-2012

Re: Chinese email

DaveyH: yes, I discovered Tony H a few minutes ago though it looked as though he owned 1P.

Mardler
Rising Star
Posts: 525
Thanks: 19
Registered: ‎01-07-2012

Re: Chinese email

 

Cross posted from Account/Billing:-

One step closer.

A clearance of stored passwords in Chrome (I deliberately left that when deleting cookies etc.) cured the main account access problem and doing the same in Safari sorted that. You would have thought that inputting a new password would have overridden the stored one but it seems not.

All that remains is the Chinese email and the use of a password I have used a couple of times.

I am now happy to delete the email and close this topic.

All that remains is to wish everyone who responded a Merry Christmas and a Happy New Year. 😀

 

Mad_Moggies
Community Veteran
Posts: 1,255
Thanks: 39
Registered: ‎01-08-2007

Re: Chinese email

@Mardler regarding stored passwords, I use Firefox and if I change a password, a little box pops up asking if I want to save the changed password BUT it goes away if I don't answer quickly and then doesn't save it. (Haven't had to change any in Safari as I only use that when FF doesn't play nicely, and I don't use Chrome, so have no idea if there's anything similar in ether of those.)
Glad to see you've sorted it all out anyway and A Merry Christmas etc to you too.

Plusnet user since November 2003
Unlimited Fibre Extra and Unlimited UK & Mobile Calls
Mac OS11 and Firefox user with latest versions of both
Mav
Moderator
Moderator
Posts: 20,493
Thanks: 3,828
Fixes: 427
Registered: ‎06-04-2007

Re: Chinese email

Moderator's Note(s)

Thread locked in favour of https://community.plus.net/t5/My-Account-Billing/URGENT-Account-hacked/td-p/1600605 as most of the contents are duplicated there.

Forum Moderator and Customer
Courage is resistance to fear, mastery of fear, not absence of fear - Mark Twain
He who feared he would not succeed sat still