LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-10-2010, 06:31 PM   #1
nappy501
Member
 
Registered: Mar 2004
Location: UK
Distribution: Redhat 9, then Fedora Core 2, Suse 10.0, 10.2 now 11.3
Posts: 136

Rep: Reputation: 15
Spam mail from Yahoo email account, have I been hacked?


Hi Everyone,

Can I first apologise for this post, I don't know where to put it on the forum. I am also not quite sure it is a linux question.

I have email accounts with my ISP, a couple of Googlemail accounts and a couple of Yahoo accounts.

The last Yahoo email account I opened was to do with a couple of websites. When it asks for an alternative address, I gave my Google mail account. The Googlemail account is my only contact on this Yahoo account. I only go to this Yahoo account once every 3 months to keep it activated.

I have noticed over the past couple of months that I am getting spam email from the Yahoo account to my Googlemail account. It has no subject line and just has a website link.

I asked a question at Yahoo answers and was told that my Yahoo account had been hacked and the hacker would be using PHP script and cookies on my C drive.

Now, I am running Suse 11.1, so no C drive, but I know I have cookies (I think). My web browser is Firefox.

Is it correct that my yahoo account has been hacked?
Does it mean my Googlemail account is now also sending out these spam emails?
Is it about PHP script?
How can I stop it?
I am hoping that as these are web based email accounts it doesn't have anything to do with my machine. Because then that probably means I have not set up the machine correctly.

Thank you for your help in advance.

Regards
 
Old 12-10-2010, 07:32 PM   #2
mjmwired
Member
 
Registered: Apr 2004
Distribution: CentOS6, CentOS5, F16, F15, Ubuntu, OpenSuse
Posts: 620

Rep: Reputation: 39
If you ever suspect of being hacked, first thing to do is change ALL of your passwords.

Yes, it is very possible you were hacked.

I see this all the time: I get an email usually from a yahoo.com email and it just contain 1 link with no subject. Many times the person who sent it does not even realize it was sent.

The best thing you can do is check your Sent mail folder and also the headers of the email you received to see if it was sent from your account or if it was just spoofed and looks like you account.
 
Old 12-10-2010, 08:09 PM   #3
stress_junkie
Senior Member
 
Registered: Dec 2005
Location: Massachusetts, USA
Distribution: Ubuntu 10.04 and CentOS 5.5
Posts: 3,873

Rep: Reputation: 332Reputation: 332Reputation: 332Reputation: 332
I looked into this a couple of months ago for a client who had a similar experience with Yahoo Mail. Evidently it is not unusual and evidently Yahoo has no intention of preventing this.

All of the information that I found on the subject reflects the advise given by mjmwired.
 
Old 12-11-2010, 08:37 AM   #4
Hangdog42
LQ Veteran
 
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,803
Blog Entries: 1

Rep: Reputation: 416Reputation: 416Reputation: 416Reputation: 416Reputation: 416
While the advice to change your password is fine, from your description it could also be a simple joe job where a spammer is just forging the sender information with your email credentials and your account hasn't been hacked.

My experience with Yahoo support is that the first line people are highly incompetent and extremely prone to giving phenomenally bad advice and answers. Like mjmwired said, check the sent folder. If there is nothing there, it is probably a joe job.
 
Old 12-11-2010, 03:29 PM   #5
nappy501
Member
 
Registered: Mar 2004
Location: UK
Distribution: Redhat 9, then Fedora Core 2, Suse 10.0, 10.2 now 11.3
Posts: 136

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by Hangdog42 View Post
While the advice to change your password is fine, from your description it could also be a simple joe job where a spammer is just forging the sender information with your email credentials and your account hasn't been hacked.

My experience with Yahoo support is that the first line people are highly incompetent and extremely prone to giving phenomenally bad advice and answers. Like mjmwired said, check the sent folder. If there is nothing there, it is probably a joe job.
Thank you for this.
I am going to assume it is a joe job then, although I am not a company or anything. I presume it is automated and is just using my Yahoo email address to send everyone in my contact folder a website for drugs. A problem for them as my Googlemail account is the only contact.

I have found out how to see the Googlemail header. I have read on another site that you can only really trust the 'Received' lines. I have found this site for checking the sender's IP address http://whois.arin.net/ui. I'm not sure what the information I have found means.

But as long as they can't get to my machine and are not bothering anyone else, I suppose I can leave it.

Regards
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
mail goes to yahoo spam dir nima0102 Linux - Server 2 06-02-2009 04:57 AM
Ubuntu server with postfix. My mail goes to Spam in Gmail and Yahoo Mail. Ideeas? bob808 Linux - Server 4 02-07-2009 05:11 PM
Outgoing email improperly marked as spam by yahoo/msn terataz Linux - Server 6 08-22-2008 12:09 PM
qmail - mail server hacked,sending spam - help.. > skate Linux - Server 8 07-29-2008 03:25 AM
Cant login to yahoo email account anymore? M$ISBS General 2 11-11-2006 09:37 PM


All times are GMT -5. The time now is 02:09 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration