My email was hacked- do I have a virus? PLEASE HELP

[Lucille Carter]

Not really... Packet interception maybe, but not a key logger. And if it's going to someones laptop they'd also need to spoof the SSID (possibly the MAC address too) of of the real Wi-Fi and mask the real ones SSID broadcasting (not easy at all). You should read up on how theses things work before you post things like this.

You need to read up, too. I have a friend who demonstrated with his laptop connect to his "black box" which he would not comment on.

 

[simon48]

You need to read up, too. I have a friend who demonstrated with his laptop connect to his "black box" which he would not comment on.

That's not any useful info and it doesn't refute what I said.

 

[Lucille Carter]

That's not any useful info and it doesn't refute what I said.

Sorry but it proves you wrong.

 

[simon48]

Sorry but it proves you wrong.

No, it doesn't. I have no info on what it's doing, is a Mac really connecting?, does the target need to download something?, is there SSID spoofing (and MAC address spoofing)?, is really a keylogger?

Depending on how exactly it's setup it could be very cool, but completely useless in the real world.

 

[CaptWhitey]

What are you supposed to do to stop these bogus e-mails that get bounced from showing up in your inbox?

 

[oldhifi]

Yahoo mail accounts are hacked all the time. It's very common.

LOL...yep!

 

[simonsi]

No, it doesn't. I have no info on what it's doing, is a Mac really connecting?, does the target need to download something?, is there SSID spoofing (and MAC address spoofing)?, is really a keylogger?

Depending on how exactly it's setup it could be very cool, but completely useless in the real world.

WiFi hoptspot spoofing is the new danger, you think you are logging onto a known hotspot but in reality the security ends at the fake hotspot node and your traffic can be seen there by the fraudster.

No downloading required - it spoofs the secure https layer so all devices vulnerable.

 

[simon48]

WiFi hoptspot spoofing is the new danger, you think you are logging onto a known hotspot but in reality the security ends at the fake hotspot node and your traffic can be seen there by the fraudster.

No downloading required - it spoofs the secure https layer so all devices vulnerable.

For sure, I was commenting to someone who was claiming to have seen this and it was also a keylogger and was giving no info on what it was actually doing to back up the claim. What you're saying makes perfect sense though.

 

[simonsi]

For sure, I was commenting to someone who was claiming to have seen this and it was also a keylogger and was giving no info on what it was actually doing to back up the claim. What you're saying makes perfect sense though.

There is a recent BBC "Click" episode where they cover it in some detail - its something every mobile WiFi device user should be aware of....

 

[whitedragon101]

I have had a MBP for over a year now and have never had a problem. My email was hacked this week and spammed some viagra link to basically everyone in my contact list. I have asked questions before on this forum about viruses and everyone always sends me that link that "your mac does not have a virus". Well, if I don't have a virus, how could this have happened, and what do I need to do now to protect myself ??? Please help, I have no idea what to do now. All help is greatly appreciated!

If you want to be safe use two step verification for every service you use that offers it. You can do the password dance of trying to increase entropy. But if someone compromises the password that have access. For example now with the heartbleed bug you could have an amazing password but that wouldn't help if they pinch the data right from the server.

Two step verification/authentication is where you are sent a text when you try to log in from a new computer with a code that you enter into the webpage. This code can only be used once (a new text is sent for each log in attempt). If they don't have your phone they can't access your account. Thats as good as security gets for now.

Google Mail offers it.

(as do facebook, paypal, steam and many others)