I have a friend I speak to over IRC. Let her name be X. X is quite security conscious, but not tech-oriented. Her email password would have taken 4 quadrillion years to crack according to https://howsecureismypassword.net It was 26 characters. She also used double authentication with her phone. She received a code on her phone to log in. Her email Provider, was hotmail.
X got into a flame war with a guy named Y. She apparently rejected him.
Some while later, her IRC account was jeopardised, and he posted some stuff through her account.
Apparently, Y hacked into her email and then used it to change her IRC password. He said he traced her IP, found her email address and cracked it. She insists that her email account was compromised.
I gave X some advice based on my limited security knowledge.
- Use a proxy server
- Use an app to connect to the IRC like IRCCloud
- Run a deep scan using an Antivirus
- Run a rootkit scan on her PC
- Run an antispyware scan
- Change Email Address
- Make sure her router uses WPA2 encryption.
I'm not sure if I should suggest changing router, since he knows her IP.
I wanted to get professional advice, on what security steps she should take.
Edit: She said that apart from the double authentication using her phone they're other Emergency methods, like security question and sending the code through another email
Edit: She lives In Ireland, and when she checked recent activity from her hotmail, she saw this:
She said that her Rootkit scan, and Virus Scan came up Empty.