Am I/ Have I Been Hacked? Phished?

[Bluebell72]

Got home from work, turned on computer and opened emails.
There are two from 'do not reply to' addresses and the message is the same 'here's your password reminder' and then a real password (the same in both cases) that I do use. They are not banking passwords.

I don't know either of the sites - and using another computer I typed in the internet address to one of them - no such site.

Are these spoofs? Phishing? I don't get it - they're not to sites I know, or exist by the look of it, I am confused - and the emails don't ask for any action of any sort.

 

[ASC1951]

No reputable site ever sends people passwords except in response to a 'forgot password' request - and even then, it's a temporary password.

I would run your AV/malware program then delete the emails and change the relevant passwords. IMO you need to check that you haven't got a keystroke trojan, because the purpose of the email may well be to track those changes.

 

[dodgy]

Sounds like someone has entered your username or email address into a website possible by accident, couldn't get their password to be accepted and then have gone for the "I've forgotten my password" option. Then you get the resultant email.

Don't think it's anything to worry about.

 

[Manonabike]

Sounds like someone has entered your username or email address into a website possible by accident, couldn't get their password to be accepted and then have gone for the "I've forgotten my password" option. Then you get the resultant email.

Don't think it's anything to worry about.

I think you are mistaken..... read the post again.

 

[Edge705]

Got home from work, turned on computer and opened emails.
There are two from 'do not reply to' addresses and the message is the same 'here's your password reminder' and then a real password (the same in both cases) that I do use. They are not banking passwords.

I don't know either of the sites - and using another computer I typed in the internet address to one of them - no such site.

Are these spoofs? Phishing? I don't get it - they're not to sites I know, or exist by the look of it, I am confused - and the emails don't ask for any action of any sort.

Are you using web based email or client based email such as outlook or outlook expresss?

 

[ian turner]

Google the site addresses and see what pops up.

 

[swee'pea99]

If you don't have them already, download avast and spybot search & destroy. Download and install updates. Go off line and run them both in their deepest scan modes. See what if anything they discover, then take it from there.

Good luck. And I agree with others: this is definitely one to take very seriously.

 

[ufkacbln]

I think you are mistaken..... read the post again.

... or not.

I have read this and honestly think it is a toss up, if only the sites were known.

Some websites will send the password to the original registered address in return to a "Forgotten Password" request, others will send a link to reset

I have had this happened and queried it with the company. The outcome was that it was a genuine error. Similar name misspelt to mine and a password reminder requested.


It may or may not be suspicious.

Which of course is no help at all, if only for peace of mind do run the checks suggested above.

 

[Manonabike]

... or not.

I have read this and honestly think it is a toss up, if only the sites were known.

Some websites will send the password to the original registered address in return to a "Forgotten Password" request, others will send a link to reset

I have had this happened and queried it with the company. The outcome was that it was a genuine error. Similar name misspelt to mine and a password reminder requested.


It may or may not be suspicious.

Which of course is no help at all, if only for peace of mind do run the checks suggested above.

Exactly.

People should not go round giving advise "nothing to worry about" when there are elements that make it highly suspicious.

 

[dodgy]

Well we're only being given half the story, no details of the sites (sometimes the emails will be transmitted from a mailserver that is only partially similar to the actual URL of the site).

From what we have been told, I'm still saying nothing to worry about.

But if more information is disclosed, we might be able to go to Defcon 1.

 

[growingvegetables]

I'm with the "take it seriously" brigade - if only for peace of mind.

And just to add another useful tool - Malwarebytes; it's removed loads of c**d that spybot failed to remove (hmmph, that spybot failed even to recognise was there )

 

[Manonabike]

Well we're only being given half the story, no details of the sites (sometimes the emails will be transmitted from a mailserver that is only partially similar to the actual URL of the site).

From what we have been told, I'm still saying nothing to worry about.

But if more information is disclosed, we might be able to go to Defcon 1.

I hope you are not a doctor!!!! On the other hand, if you are indeed a doctor then god save those patients

 

[ohnovino]

+1 to Malwarebytes.

Also, if you're using the same password on any sites that matter, change it asap.

 

[dodgy]

I hope you are not a doctor!!!! On the other hand, if you are indeed a doctor then god save those patients

I have no idea what you're talking about.

 

[Manonabike]

I have no idea what you're talking about.

UUUhhh lack of imagination too!!! Perfect combination for .....