Did someone somehow hack TPF?

[surlynkid]

I received the following email shown in the screen capture. it appears as though it was sent from my email account which is the account i use for TPF. it was then cc'ed to my home email account, my work email account, and this tpf account. the tpf part makes me wonder if it originated from here somewhere.

Scott

[zachary]

No, it was sent from YOUR email account.

[surlynkid]

i recognize it was sent from my account, but nowhere in my account do i have tpf@texasphotoforum.com in any address book or email or anything else. that part seemed odd and led me to wonder if anything happened from this site. i have never had any sort of hack before, keep symantec up to date, etc.

[thehatguy]

When you find out something let us know.

Like you, I keep everything up to date. I can't figure out how these assholes get in to my email account and send out spam.

John

[surlynkid]

Originally Posted by thehatguy

When you find out something let us know.

Like you, I keep everything up to date. I can't figure out how these assholes get in to my email account and send out spam.

John

my password was extremely secure on that email account. while i just changed it, it had a 3 letter acronym followed by an 8 letter word that i always accidentally misspell. the acronym and misspelled word have nothing to do with each other. my password was not changed by whatever "thing" made that happen. the list of recipients was also odd as it was only my wife, son, myself, my father, my brother in law and multiple accounts for those folks. oddest thing i ever saw.

[r0xikat]

E-mail spoofing - Wikipedia, the free encyclopedia

Someone's sending from my email address! How do I stop them?!

so your email was either randomly picked up by spider bots, spoofed from someone else, etc... hope the links help! your account should be fine.

[zachary]

Remember People. These programs that do this stuff arent just random animals acting on pure happenstance. They are engineered by some of the most skilled minds in the world.

They know what they are doing and there is nothing that they do that is random or by chance. Its carefully engineered and executed.

Ive seen this alot lately. Someones personal email is compromised. It can be anything, hotmail, gmail, you name it.

Spam is sent from that persons email account to his contacts. His contacts almost always open it, recognizing the sender. Then they too get infected with bots while also being redirected to viagra websites or phising websites.

And these guys are making ungodly ammounts of money doing it.


And by the way, if your password dosent have even a single number in it, its NOT secure. It dosent matter anyway. If your traffic isnt secure (https, SSL) no password is safe.

[surlynkid]

Originally Posted by zachary

Remember People. These programs that do this stuff arent just random animals acting on pure happenstance. They are engineered by some of the most skilled minds in the world.

They know what they are doing and there is nothing that they do that is random or by chance. Its carefully engineered and executed.

Ive seen this alot lately. Someones personal email is compromised. It can be anything, hotmail, gmail, you name it.

Spam is sent from that persons email account to his contacts. His contacts almost always open it, recognizing the sender. Then they too get infected with bots while also being redirected to viagra websites or phising websites.

And these guys are making ungodly ammounts of money doing it.


And by the way, if your password dosent have even a single number in it, its NOT secure. It dosent matter anyway. If your traffic isnt secure (https, SSL) no password is safe.

has a number and a character now.

[pjt72611]

For a strong password, it is recommended you have at least one cap, one number, and one special character. Also using words from the dictionary is discouraged. Eight total characters used to be enough, now your password should be 12-14 characters to be considered a strong password.

[zachary]

Originally Posted by pjt72611

Eight total characters used to be enough, now your password should be 12-14 characters to be considered a strong password.

Im not questioning this, but im curious what standard this is based on?

I havent beek keeping up with cracking techniques and im wondering if brute force password cracking has become more sophisticated. Ive seen alot more email intrusion these days and im wondering how they are getting this done.

Is it just bad passwords, are they keylogging somehow, or are brute force attacks that much better because way back in my day they could take days or weeks even to crack a simple password.

[MT Stringer]

now your password should be 12-14 characters to be considered a strong password.

UGH! I can't even remember what I had for breakfast yesterday, let alone a 14 character password!