0

I have a friend I speak to over IRC. Let her name be X. X is quite security conscious, but not tech-oriented. Her email password would have taken 4 quadrillion years to crack according to https://howsecureismypassword.net It was 26 characters. She also used double authentication with her phone. She received a code on her phone to log in. Her email Provider, was hotmail.

X got into a flame war with a guy named Y. She apparently rejected him.

Some while later, her IRC account was jeopardised, and he posted some stuff through her account.

Apparently, Y hacked into her email and then used it to change her IRC password. He said he traced her IP, found her email address and cracked it. She insists that her email account was compromised.

I gave X some advice based on my limited security knowledge.

  • Use a proxy server
  • Use an app to connect to the IRC like IRCCloud
  • Run a deep scan using an Antivirus
  • Run a rootkit scan on her PC
  • Run an antispyware scan
  • Change Email Address
  • Make sure her router uses WPA2 encryption.

I'm not sure if I should suggest changing router, since he knows her IP.

I wanted to get professional advice, on what security steps she should take.

Edit: She said that apart from the double authentication using her phone they're other Emergency methods, like security question and sending the code through another email

Edit: She lives In Ireland, and when she checked recent activity from her hotmail, she saw this:

enter image description here

She said that her Rootkit scan, and Virus Scan came up Empty.

  • 1
    Don't use the same password for everything. – Nic Hartley Jul 24 '16 at 17:04
  • 2
    if she is using dual factor authentication with her phone to access her email, i *hightly& doubt her email was hacked. even if this person knew her password, he would not have the 2nd authentication method. – Keltari Jul 24 '16 at 17:08
  • 2
    ...also, how do you get an email from an IP address? Unless your friend surfs the internet through her mail server, and somehow it's broadcasting the username, that's impossible. – Nic Hartley Jul 24 '16 at 17:08
  • She uses different passwords for most things. She uses a password generator. We play an RPG together, her password for that was 13 characters, and was a string of completely random upper and lower cse letters, numbers and symbols. – Tobi Alafin Jul 24 '16 at 17:09
  • 1
    @Tetsujin, doesn't dual factor authentication prevent this? Assuming she went to a fake Hotmail website, would they be able to replicate the authentication method? (Sending a code to her phone)? They'd need her phone number, and some way to make the sender of the message look like Hotmail. – Tobi Alafin Jul 24 '16 at 19:17
0

Update her computer programs, maybe the IRC client she is using has some kind of vulnerability and that is how she got hacked. Tell her to check for SSL (green lock - https://www.example.com) every time she inputs her password in a website. (Maybe someone send her a link to a clone of hotmail and stole her password that way).

I think hotmail should have a way to see last log ins (who logged - what time- where did she log in from). She can check to see if there an IP address from a foreign country, or if someone logged in from a different computer etc..

EDIT check this https://www.microsoft.com/en-us/Account/Security/recentactivity.aspx

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.