Email -- Messages being sent I didn't send

  • 0
  • 1
  • Problem
  • Updated 2 months ago
  • Acknowledged
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members.

I started receiving "undeliverable" messages in my inbox for emails that I never sent to begin with. They were sent from the eigbox.net mail server (I think this is a Homestead server) to the following email address...    someone@abc.com.my

I have since received multiple undeliverable messages, all for emails I have never sent. I changed the password to my email. I'm not sure if this will fix the problem.  

Here is the text from the .txt attachment that came with the undeliverable email...

Return-path: <danderson@whitecfb.com>
Received: from bosmailscan06.eigbox.net ([10.20.15.6])
 by bosmailout03.eigbox.net with esmtp (Exim)
 id 1hQtap-0005Tj-1N
 for info@abccompany.com; Wed, 15 May 2019 09:05:11 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=whitecfb.com; s=dkim; h=Sender:Message-ID:Subject:To:From:Date:Content-Type
 :MIME-Version:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
 Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
 :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
 List-Subscribe:List-Post:List-Owner:List-Archive;
 bh=2EycrIGW3E3kLNEwowNMRFPst+qb1tVqU3iF7rTftno=; b=I8kjOlfrsDUkvM90Wfg0y6hd6x
 8TbSpI0q5/6qI2Wtu0eAufLSnbczXzK7NgqIJCjhUsSPZe+PsurcrsQ/wAiOHynY/Qhw77HBZhip5
 jVOYoQHDVZSejNZofx7lGBOYgox9RWqNcLiKAt/mzzUH0NYzPkbiRoJJ28a/AC4zo2YdncolJw+gO
 sXn3kLsvcsycXIppMZkFSoOEBe4dzxrUdvD4sYEAc8KKhEleHYjmA9U+MflgxeLHr169eXJ2o53qn
 3cIbWnskRtsk4KGLJTJCpobQyabrYnnWLQgwwNH8Nh7iZHMfWTZ7i0IxS8/pHyO0GAU2yKCg3pQJV
 CYiGalhw==;
Received: from [10.115.3.31] (helo=bosimpout11)
 by bosmailscan06.eigbox.net with esmtp (Exim)
 id 1hQtao-0007jS-Um
 for info@abccompany.com; Wed, 15 May 2019 09:05:10 -0400
Received: from boswebmail21.eigbox.net ([10.20.16.21])
 by bosimpout11 with
 id Cd4r2000L0TFznN01d4upP; Wed, 15 May 2019 09:05:10 -0400
X-Authority-Analysis: v=2.2 cv=FsZ1xyjq c=1 sm=1 tr=0
 a=uNylZKUkEaobgHNo98xXvw==:117 a=WoQ/y3mwat/EnOnqzrZ4Ug==:17
 a=E5NmQfObTbMA:10 a=0O5QmZEAKVuOyudN15EA:9 a=CjuIK1q_8ugA:10
 a=HnHKYhVr2avWzeQ_adIA:9 a=_W_S_7VecoQA:10 a=QEXdDO2ut3YA:10
Received: from [127.0.0.1] (helo=homestead)
 by boswebmail21.eigbox.net with esmtp (Exim)
 id 1hQtaV-0005vr-GE; Wed, 15 May 2019 09:04:51 -0400
Received: from [160.152.34.223]
 by emailmg.homestead.com
 with HTTP (HTTP/1.1 POST); Wed, 15 May 2019 09:04:51 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="=_01e56938a9dd61ede98d1b22e61e1654"
Date: Wed, 15 May 2019 08:04:51 -0500
From: danderson@whitecfb.com
To: undisclosed-recipients:;
Subject: PAYMENT OF YOUR FUND
Message-ID: <68df8643c44ae90f72918f228c330199@whit...>
X-Sender: danderson@whitecfb.com
User-Agent: Roundcube Webmail/1.3.8
X-EN-AuthUser: danderson@whitecfb.com
Sender:  danderson@whitecfb.com
X-EN-Class: impinc

What else should I do to secure my email account?

Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb

Posted 2 months ago

  • 0
  • 1
Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,938 Points 20k badge 2x thumb
Hello,

It sounds as if your email is compromised. I recommend you run a scan on any device you use to check your email to check for malware or viruses. Then, once all devices are clean, please reset your password for your email address.

https://community.homestead.com/homestead/topics/how_to_i_reset_my_email_password
Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb
I am running a malware scan now. However, the sent emails are not showing up in my email's sent folder. So could it be that someone else is "spoofing" my email address?
Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,804 Points 20k badge 2x thumb
It is possible that spoofing occurred, considering how many IP addresses it passed through.
Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb
UPDATE --- The sent emails were in my sent folder in the Homestead Roundcube Webmail portal. However, they ARE NOT in my sent folder in my Outlook 365 program (I have it set up as a POP account). Therefore, I have determined that the issue is with Roudcube Webmail and NOT a compromise of my laptop.
Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,804 Points 20k badge 2x thumb
Not necessarily. It just means that when your email was compromised (which means someone discovered your email/password combo), they used Roundcube to log in.
It is still important to run the scans and reset your password.
Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb
Did a full scan... no threats found.



Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,804 Points 20k badge 2x thumb
Good, so now you can reset your password.
Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb
Continuing to get undeliverable emails in my inbox. Here's the latest...

This message was created automatically by mail delivery software.

A message that you sent has not yet been delivered to one or more of its recipients after more than 4 hours on the queue on bosmailout08.eigbox.net.

 

The message identifier is:     1hQtYg-0007vI-L2

The date of the message is:    Wed, 15 May 2019 08:02:46 -0500

The subject of the message is: PAYMENT OF YOUR FUND

 

The addresses to which the message has not yet been delivered are:

 

  sokh.lai@abb.com.my

  shang.li@abb.com.my

  raphael.widmen@abb.com.my

  patricia.wong@abb.com.my

  parnjit.singh@abb.com.my

  daniel.affandri@abb.com.my

  chee.keong@abb.com.my

  andrew.ng@abb.com.my

 

No action is required on your part. Delivery attempts will continue for some time, and this warning may be repeated at intervals if the message remains undelivered. Eventually the mail delivery software will give up, and when that happens, the message will be returned to you.


Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,804 Points 20k badge 2x thumb
These will continue, but decrease in frequency until they stop coming through
(Edited)
Photo of Doug Anderson

Doug Anderson

  • 860 Points 500 badge 2x thumb
I use Outlook 365 to check my Homestead email.  I also have started receiving error messages that the security certificate for my email server is no longer recognized.
Photo of Elyzabeth

Elyzabeth , Official Rep

  • 42,938 Points 20k badge 2x thumb
Please make sure that your settings match those that we provide for email clients:

https://community.homestead.com/homestead/topics/how_do_i_setup_an_email_client_to_check_my_homestead_mail
(Edited)

This conversation is no longer open for comments or replies.