Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I own a Yahoo mail account. I am using this account for sending resumes and receive notifications from various job portals. But yesterday, I found that some 10-15 mails had been sent to random addresses from my account. Most of them had this format:

hr@<companyname>.com

I am pretty sure that I didn't send any mails to such addresses. Initially, I thought the job portals may be sending mails on my behalf and Yahoo is logging them, but then I saw the contents. The contents of all those mails were a URL, which I did not click. SCARED. Also, to top it off, my "Sending Name" has been changed to 'Nice Maria'!! o_0

I have taken the necessary measures and changed my password and the secret question. I cannot delete this account as this email is registered with all the job portals and other companies.

Is this a simple case of my account being compromised or was I a victim of some web vulnerability? All the mails seem to be bot generated, with only a URL as the message body. Please advice.

share|improve this question

closed as off topic by Breakthrough, HackToHell, Simon Sheehan, 8088, Ƭᴇcʜιᴇ007 Dec 16 '12 at 20:55

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
CSRF attacks can do this or a keylogger got your password ... –  HackToHell Dec 16 '12 at 14:00
1  
"But yesterday, I found that some 10-15 mails had been sent to random addresses from my account." How did you find this out? –  David Schwartz Dec 16 '12 at 16:28
1  
Did you find these items in your sent items folder, or were they in your inbox as bounces? –  Graham Wager Dec 16 '12 at 16:49
    
@DavidSchwartz Sent items folder –  Rickesh John Dec 17 '12 at 5:42

2 Answers 2

Nothing you have said suggests any sort of compromise. I can write a letter and mail it to you with the President's return address on the envelope -- does that mean I "hacked" the President?

share|improve this answer
    
What if the mail was sent from the president's email without his knowledge and the president finds this out when he sees them in his sent items folder. I guess then you could say you "hacked" the President. :) –  Rickesh John Dec 17 '12 at 6:02
    
Are you sure you found them in your sent items? If so, then your email account was hacked. –  David Schwartz Dec 17 '12 at 7:58
    
Yes. While browsing the sent items folder I came across these mails lined up and sent to different ids. Apart from 2-3 mails all of them were sent out on the same day. –  Rickesh John Dec 17 '12 at 8:54

This is a SMTP faking, which basically means the user sent the email through another SMTP server that used any email address (you can send an email as i@am.com even though you don't even own the domain), however your email account is not compromised and by no means people could see your email inbox.

To prevent this from happening, my suggestion is to look into the SPF record creation, which if you are using Google Apps, it can be found here: http://support.google.com/a/bin/answer.py?hl=en&answer=33786, this can not prevent people from sending emails from fake email address, but it will automatically sent those ones to spam.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.