email account hacked - how did they do it? What do I do next?

Miscellaneous and Personal Stuff I Must Share
1

:mad:

A few weeks ago, I went to log into my email and couldn’t. It took a few failed logins before I had to call the provider to ask what was going on. Apparently, my account had been locked for sending several thousand e-mails within a 24-hour period.

I got my account unlocked, then looked inside. Apparently somehow somebody had sent thousands of spam e-mails from my account to a bunch of random e-mail addresses.

:mad:

HTF did they manage this? My previous password was, I thought, reasonably secure - an eight-character long strong of random numbers and letters, lower and upper-case.

I ran AVG anti-virus and Spybot on every machine I use, came up with nothing. I changed my password to something even longer. So far, I seem to be ok.

But then logging in today, I get a message - 10 failed logins since your last successful login. I look, and there’s a bunch of failed logins from an IP address in the Netherlands. All recent successful logins were from IP addresses that I recognize. Damn them.

Is there anything I should be doing right now?

2

Do you use that password and username anywhere else? Anywhere at all, even in the past?

Web sites get hacked all the time and nobody is aware or nobody tells you or you don’t even remember having created a login at that site it was so long ago.

Then the hackers take the database of usernames, emails and passwords and pounds them through Yahoo, AOL, Gmail and Hotmail to see what works.

Only thing you can do is change your password, and try to have a unique password for every place you sign up.

3

Did you use a public wifi?

4

Ugh, I have like 30 websites. I don’t think I’m up to remembering 30 unique passwords. I was really surprised by this, since I don’t use a “common” email server, I’ve used fastmail for eight years now.

And as for Chimera’s question - yeah, I use public wifi from time to time.

5

It doesn’t matter how strong your password is if you reuse it. You need 30 unique login names and 30 unique passwords.

6

Get a program like KeePass which will store all your various passwords in an encrypted database. I’m sure there are lots of good ones, but that’s what I happen to use. It will not only store passwords, but can also generate them if you’re feeling unimaginative, and there is likely a version for your OS and possibly your smart phone also, if you’re into that kind of thing.