email hacked

  • 1
  • 1
  • Question
  • Updated 8 months ago
  • Answered
  • (Edited)
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Archiving inactive content

I have repeatedly received emails saying my homestead email was hacked.  The last email was very disturbing.   I went in to reset my password and the system said there had been too many attempts and to try in 15 minutes.   I only made one attempt   The email I used was donna@
Photo of julie8950

julie8950

  • 70 Points

Posted 9 months ago

  • 1
  • 1
Photo of Elyzabeth

Elyzabeth , Official Rep

  • 45,038 Points 20k badge 2x thumb
Hello,

Where did you go to reset the password? I've never seen an error that refers to too many reset attempts. Did you go through these steps?:

https://community.homestead.com/homestead/topics/how_to_i_reset_my_email_password

Please make sure to run a scan for viruses or malware on your computer before you do this.
(Edited)
Photo of VICTOR0250

VICTOR0250

  • 60 Points
I have just received the same kind of e-mail several times and had done nothing in the past, should I do something this time? Here ́s the e-mail received:
 
Photo of ray1551

ray1551

  • 110 Points 100 badge 2x thumb
I got the same email.
Photo of Drew N

Drew N, Alum

  • 262,816 Points 100k badge 2x thumb
I have seen this mail as well. If you use Roundcube to view the email, there is an option to show source. If you can copy/paste the source here, I can double check, but so far I have not seen any of the reporting accounts having been hacked. They are using a method called spoofing, which does not pose a danger to you in this event.
Photo of ray1551

ray1551

  • 110 Points 100 badge 2x thumb
below is the top section...
Photo of Lori0837

Lori0837

  • 182 Points 100 badge 2x thumb
I keep getting the email too.  Will have to look into how to copy the source. 
Photo of ray1551

ray1551

  • 110 Points 100 badge 2x thumb
Return-Path: <SRS0=u3TfGj=SD=s10.coopenet.com.ar=burgh@raymondbarlow.com>
Delivered-To: ray_raymondjbarlow_if@pop.homestead.com
Received: from bospopproxy02.eigbox.net ([10.20.15.11])
	by bospop27.eigbox.net with LMTP id IAgFD4ZYoVwgdwAA5kiHlw
	for <ray_raymondjbarlow_if@pop.homestead.com>; Sun, 31 Mar 2019 20:17:10 -0400
Received: from bosmailscan11.eigbox.net ([10.20.15.11])
	by bospopproxy02.eigbox.net with LMTP id 2D7pDoZYoVzlKgAAcg53ZQ
	; Sun, 31 Mar 2019 20:17:10 -0400
Return-path: <SRS0=u3TfGj=SD=s10.coopenet.com.ar=burgh@raymondbarlow.com>
Envelope-to: ray@raymondbarlow.com
Delivery-date: Sun, 31 Mar 2019 20:17:10 -0400
Received: from [10.115.3.11] (helo=smtp.maileig.com)
	by bosmailscan11.eigbox.net with esmtp (Exim)
	id 1hAkdR-0004Mx-9Y
	for ray@raymondbarlow.com; Sun, 31 Mar 2019 20:17:09 -0400
Received: from mail.s10.coopenet.com.ar ([190.104.48.5])
	by bosimpinc11 with bizsmtp
	id uoH31z01906j2x201oH5Gv; Sun, 31 Mar 2019 20:17:09 -0400
X-EN-OrigIP: 190.104.48.5
X-EN-IMPSID: uoH31z01906j2x201oH5Gv
Received: from localhost (unknown [127.0.0.1])
	by mail.s10.coopenet.com.ar (Postfix) with ESMTP id 2B08010A864D
	for <ray@raymondbarlow.com>; Sun, 31 Mar 2019 23:27:52 +0000 (UTC)
X-Virus-Scanned: amavisd-new at s10.coopenet.com.ar
Received: from mail.s10.coopenet.com.ar ([127.0.0.1])
	by localhost (correo.s10.coopenet.com.ar [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id TCfV8WPXAVb5 for <ray@raymondbarlow.com>;
	Sun, 31 Mar 2019 20:27:37 -0300 (-03)
Received: from [Dinamico-148-71.cerentini.com.br] (unknown [177.84.148.91])
	by mail.s10.coopenet.com.ar (Postfix) with ESMTPSA id EDA6A10A8C67
	for <ray@raymondbarlow.com>; Sun, 31 Mar 2019 20:27:03 -0300 (-03)
X-Abuse-Reports-To: <abuse@s10.coopenet.com.ar>
List-Help:
 <http://s10.coopenet.com.ar/q/rdxwi/?blr=aby_fwk&dlwal=ljd4eppo9ia8rw0vu&Z=10884422>
Message-ID: <7mghnz.sm22oqbpawbmxxd@mail.s10.coopenet.com.ar>
List-ID: fothnlpdcgyb5ncklzw1mhout50 list
 <bsb969pkm588eg7qfhm04lcq8.988020.s10.coopenet.com.ar>
To: ray@raymondbarlow.com
X-aid: 0016246780
Content-Type: multipart/related;
 boundary="6945CBB40F9596E64A86.54D91803188D0.B3CE1B40.162AEC6B8"
MIME-Version: 1.0
Date: Mon, 1 Apr 2019 01:27:03 +0200
Subject: ray
X-Complaints-To: abuse@mailer.s10.coopenet.com.ar
Organization: Majbz
From: <ray@raymondbarlow.com>

This is a multi-part message in MIME format

--6945CBB40F9596E64A86.54D91803188D0.B3CE1B40.162AEC6B8
Content-Type: multipart/alternative;
        boundary="6EB3FE17.309BDB8DDDE6.53BF5.BFEAC25CFDAE9801"

--6EB3FE17.309BDB8DDDE6.53BF5.BFEAC25CFDAE9801
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64


--6EB3FE17.309BDB8DDDE6.53BF5.BFEAC25CFDAE9801
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64

PGh0bWw+PGJvZHk+PGltZyBzcmM9ImNpZDphdHRfaW1nXzk0MzM2MCI+PC9ib2R5PjwvaHRtbD4N
Cg==

--6EB3FE17.309BDB8DDDE6.53BF5.BFEAC25CFDAE9801--

--6945CBB40F9596E64A86.54D91803188D0.B3CE1B40.162AEC6B8
Content-Type: image/jpeg;
        name="1554082022746.jpg"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
        filename="1554082022746.jpg"
Content-ID: <att_img_943360>

Photo of Drew N

Drew N, Alum

  • 262,816 Points 100k badge 2x thumb
The sending server was not ours, which means they were spoofing and not sending it from your account.

Received: from mail.s10.coopenet.com.ar ([127.0.0.1])

If you haven't seen this article on account security, please give it a read so you can continue to stay safe.
Photo of ray1551

ray1551

  • 110 Points 100 badge 2x thumb
Thanks, that's what i figured.
Photo of Drew N

Drew N, Alum

  • 262,816 Points 100k badge 2x thumb
You're welcome

This conversation is no longer open for comments or replies.