Am I/ Have I Been Hacked? Phished?

[Scilly Suffolk]

I'd be concerned: this could be a phishing attempt or someone is trying to hack the accounts these passwords related to.

If they're phishing attempts then you would expect them to be trying to get your password, not remind you of it.

If these are genuine password reminders, then it is not odd that they came from "do not reply to" addresses but it is curious that they company they came from isn't otherwise identified.

I suggest you forward the e-mails to the companies to which the passwords relate; they will be able to advise you if they are genuine or not.

If they are genuine, then it would suggest that someone is trying to hack these accounts and asked for a password reminder in the hope of reading the e-mails.

Either way you should change the passwords concerned and stop using the same password for multiple accounts.

Personally, I use LastPass to remember my passwords: you log-in to LastPass and then it logs you into the accounts you use, so you only need to remember one password. It also means you can use really strong passwords rather than ones you can easily remember, which usually means they can easily be cracked.

It's not without drawbacks, but it is much better than what you are currently doing.

 

[dodgy]

UUUhhh lack of imagination too!!! Perfect combination for .....

What do you think is happening to the OP?

 

[_aD]

Got home from work, turned on computer and opened emails.
There are two from 'do not reply to' addresses and the message is the same 'here's your password reminder' and then a real password (the same in both cases) that I do use.
Are these spoofs? Phishing? I don't get it - they're not to sites I know, or exist by the look of it, I am confused - and the emails don't ask for any action of any sort.

Try doing a Google search for the web site address - see if other people have had this as well. If you use the same password often then it is likely a web site you use has been hacked and had their passwords stolen, or someone has guessed your password if it is not complex enough. Why they are then asking you to login to an unknown site is a good question, but they could try a number of other tricks from there, I suppose.

To best advise I'd need to see the whole email, including headers - but without confidential information such as your name, email, password etc.

 

[Manonabike]

What do you think is happening to the OP?

Not really sure, could be something totally harmless but on the other hand it could well be some kind of scam hence I would not say "nothing to worry about" in case the OP follows my advise and it turns out to be irresponsible advise.

If it was me I would be examining the email's header and using google to try to track down the source of the email and then act accordingly but I don't have his details so my advise is to use another "cleaned of viruses" computer and change the password in question.

 

[Bluebell72]

Hello, sorry for delay in replying.

I already have spybot and avg antivirus.

I scanned everything, re-booted, the password is one I use for a book swap site and a chat forum - nothing too big or scary, or where money changes hands!

I deleted everything, so I can't remember the sites, they were both innocuous; webactive? activeweb? searchactive or something like this.