email hacked

[continental]

I am not sure where to post this message to be the most effective.
Our email has been compromised. I am not in Mexico and don't send money.
We lost all of our emails and contacts by opening a message from Alan Murray. This started when Alan and his family was in Hong Kong and had been mugged. He needed money. By opening this, they got our emails and contacts. Again, do not open. Do not open ours or anything that is asking for help.

Thanks Jim Morsch

[Pi_guy]

What do you use as a mail reader and browser?

[DaveW]

Never mind - see below.

[BURKY]

Was that a legitimate message from Alan Murray, or had he been hacked, so the help request was phishing? I assume that's what you meant.

Post # 92 http://www.apexspeed.com/forums/show...451#post441451

[DaveW]

Post # 92 http://www.apexspeed.com/forums/show...451#post441451

AHAH - forgot that...

Friggin' scammers!

[racersonly]

I got the same message from Allan. So I guess my contacts have been compromised too?

[racerdad2]

Not necessarily. Contact info comes from many sources. Nearly everyone has been hacked. It's just a matter if they want to use your info.

[bobmelvin]

To all:

Did you expect to get an attachment? Then don't open it. PERIOD. Why is that so difficult?

One of my companies is an internet retailer. I've been around that business from literally the beginning. Wild West. Anyhow, we have been emailing to customers and getting email from customers for nearly two decades now. The single largest error commonly made is easily preventable. It is the most ignored by users and the most open to attack from a bot on your box.

Simply stop using CC in an email send. Every time you send to your entire contact list you infect every address in the send. BCC for security. If you can see the address it is as good as stolen. BCC and you are safer.

Here's a link from Rutgers published probably a decade ago.
https://www.cs.rutgers.edu/~watrous/...r-privacy.html


Keep one address for all the sites you need to leave an email address at. Then, keep one address for friends and family. Ignore at your peril.

Bob

[Pi_guy]

To all:



Here's a link from Rutgers published probably a decade ago.
https://www.cs.rutgers.edu/~watrous/...r-privacy.html


Bob

Funny I get untrusted site when I visit that link from my browser. It makes me jump through 3 or 4 "I understand that this is not a safe site" click boxes before I can view it. For some place that is offering security tips it does not leave a warm and fuzzy feeling.

[bobmelvin]

That's an issue on your browser settings. The address is as secure as a non commercial site gets.

Notice the address is https.....the addition of the 's' indicates it is a 'secure' website.


Best

[Pi_guy]

The problem is there are using transaction security https when http would be fine. It is a flat page if they are going to use https they need to use a valid security certificate. It is a poorly constructed page that is pushing security tips. To me that is a red flag.