cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Guru
Guru
65 Views
Message 1 of 4

BTYahoo email account sending spam (again)

Hi all,

 

In the last 9 months this is the 3rd or 4th time our main BT email (still currently on the Yahoo platform) account has been compromised and sending out spam.

 

Today I find out that it has been sending suspicous email to our contact list again, and wondered if you had any ideas in how they are doing it.

 

Though this time it seems to be slightly different.

 

Previously it looked like they actually logged into the BTYahoo account as their IP address was registered in the API Yahoo login history.

 

However this time the IP Address is not their.

 

I have tried to trace the IP address which the email's have been transmitted from using our main BTYahoo email address though the IP address are from all around the world (Japan, Russia, ect...)

 

However they somehow have managed to send the emails from our main BTYahoo email account to our contact list "without" or bypassing the login process.

 

Unless they have spoofed the email address, though that doesn't expain how they have managed to send it to all our contact list.

 

Below are some of the email headers:

I have put in bold what I though might be the IP address used to transmit the email

 

Email1)

 

From Our email address Fri Jan 10 11:39:39 2014
X-Apparently-To: Our email address@btinternet.com via 188.125.85.175; Fri, 10 Jan 2014 11:39:47 +0000
Return-Path: <ginzarim@from9-blog.com>
Received-SPF: none (domain of from9-blog.com does not designate permitted sender hosts)
a3ZuYXdvL21pYW53YnBjcGR6dnRoaXpuenYucGZrZHl0Ym1wdmNncmRweHRu
cWVieXFjZSBBTkRZIENMQVJLRSAxLzEwLzIwMTQgMTI6Mzk6MzkgUE0gATAB
AQEBA3RleHQvaHRtbAMDMQ--
X-YMailISG: Hs3mC.wWLDsB1cn62j8ibToIqK4DilBAbBLIuVWIQj4ih_zL
oFItqEozOPIi2taoc1ABbU3U0TijhGzfo2t4icKySxaGtGX7IGul4fuVxB6A
rkACHzx_h.GTep9CaFzsHejPFbVfyymyXZGuemuA8RoYoV.EBKPUYwMDDT9B
NlOd9dhrIOjTSOURdBvHpA6f8Ky4TT33sGxLsAwYAXS5ZO0TknatRS.7Z4v.
QZ4GZPu0gRbqxMfuOW7Qrr8hI8Uq21agIa2xZp8m2U.cO5MRAJAO6M9eCyTf
O5HAWnZBQonnDR4J0ThTAm2bCGPLQ4j2jpNtSIzSskw8wquoXK4coqBESqGj
92iI7aVXyWFaE0FxgJNd_5bn5Dgj2Bdkda5WSKFQpfwzp66wvxGY11bULOh7
CjlKLB8KfTiM48aEi0vyFEcjnN7lo0AOsL5fe8g0AZ.qI2jfkFbEralOF83x
RKfiR3wRrMlMECjpDGH3p2bPzYHFynCSfBZRw0VC4meP0zkmEM0VxkXDdZr3
Dr9FFzCveSNFShULVR6T7QjJExJDMAVgXwMkv5LYKfTqedE0RYNADJBedTHW
aRYnLaoO3wZTbwlKkuqtHkk9AW.5_taYgem4m4q0ohBCPIDRhTx7gZQeJP14
T5HpGvkfP9dFHbY1zdSYF42CR8_gpCGwjXTijM_YmKZ..UHH9oBeXAtXncFY
IETBe_Gn.Y4Ap4NWqfW5YMLntsqgcpdvNQEyzLOdsYZY9BF6ZwTT06k3SBLM
WpqaphdINrGbtwInA6ruge6hof2RXXhMf2vlj9isflNNIt6VlLfm2FQy2ixl
pLQcUiaqNbXCDc1TdauQgQ4lywPNkAWaFCUqZtFLIthyoEGt.Ixry7mPZQ5d
CiteUXvZTs.R2k.0nh4.Wmr3nj49ZxyXv9Xr7SZ9yYdT046P6hLbCBSBmnka
sO_UZB5KIipa20iKVp2L9Bj8u.dGsGV5bYhE4UtnZz6hpZ6cTuGIvoWaX79c
j8_8fGzRW5wRC0Rsi4h7dFvQWdGsbg1MQANfaAm_37Pzu6jFnt8FWFtZ8epg
GLNIw4Zh8mrHQ1vPH9e_mcDq7UINICohx2oOTLg92x1h6Dlisvo597Kc10Au
PRFNun9wW.FVH554
X-Originating-IP: [65.20.0.12]
Authentication-Results: mta1040.bt.mail.ir2.yahoo.com from=btinternet.com; domainkeys=neutral (no sig); from=btinternet.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpin24.bt.ext.cpcloud.co.uk) (65.20.0.12)
by mta1040.bt.mail.ir2.yahoo.com with SMTP; Fri, 10 Jan 2014 11:39:47 +0000
X-CTCH-RefID: str=0001.0A090209.52CFDC03.0046,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Unknown
Received: from from9-blog.com (115.146.3.219) by smtpin24.bt.ext.cpcloud.co.uk (8.6.100.99.10223)
id 52CC9B9B00A4D311 for our email@btopenworld.com; Fri, 10 Jan 2014 11:39:47 +0000
Message-ID: <52CC9B9B00A4D311@smtpin24.bt.ext.cpcloud.co.uk> (added by postmaster@smtpin24.bt.ext.cpcloud.co.uk)
Received: (qmail 63023 invoked from network); 10 Jan 2014 20:39:42 +0900
Received: from unknown (HELO mycomputer) (ginzarim@from9-blog.com@91.187.17.240)
by 0 with SMTP; 10 Jan 2014 20:39:42 +0900
From: "Our email address" <Our email address@btinternet.com>
To: "contact1" <contact1@yahoo.co.uk>,
"our mp" <our mp@parliament.uk>,
"our email" <our email@btopenworld.com>,
"contact2" <contact2@aol.com>
Subject: =?ISO-8859-1?Q?fw=3A_hi?=
Date: Thu, 10 Jan 2014 12:39:39 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To: our email@btinternet.com
Content-type: Multipart/mixed; boundary="46CCAD54_07C088B8_boundary"
Content-Description: Multipart message
Content-Length: 712

 

Email 2)

 

From Our Email Fri Jan 10 11:40:00 2014
X-Apparently-To: myemail@btinternet.com via 46.228.38.66; Fri, 10 Jan 2014 11:40:08 +0000
Return-Path: <rex@smartergeek.com>
Received-SPF: none (domain of smartergeek.com does not designate permitted sender hosts)
Zy9tZGpydC9yZ2F5cnRsYXYud3lubXRzbW5xa3loZmIgQU5EWSBDTEFSS0Ug
MS8xMC8yMDE0IDEyOjQwOjAwIFBNIAEwAQEBAQN0ZXh0L2h0bWwDAzE-
X-YMailISG: zFoM0dUWLDsNKxT8AFWm3sFVdcJWbNchjPuBaJYuiQha_kYK
SovGQ4b.7GqJIW3p8gihQ4B3tT32EQR66ZWcspOdCZIkrNXJY2qvJ0jA5E4c
IXpe3pPeBe7btPAI.a6d1Ek3LlOHh3OJzq60A9E0xfFXvsMz10zanxG4rEIG
u.UpAa4dubRtOBBXKEyEDlY9rFEEHI3OiY2BuyMWsE8NJZbUd7f052krPqYs
Lrni6kvfMbKSZMoAqkWNogMQczWKa7ScjWlH3sj.kJkKsDRfTBdYAvJBpdNX
gfSxpXnZaSms9m6M6kXnXAugNg_7SDFlD2sDw8oDsLCJRYWigi5Bqf.8T0Vc
u9LQYEXVgD94fTGHEVr7MDi9ntyLnEqVL7981jwUHSZ53f.Wz4cuQj1X0S1c
JhldKV3.ugg18xLD81TAJipJ9wtacftIQVTYhK.AU3JSbBP1s2tgw9q_yULi
Jz.BeoMIj8UlxvEUwfOCRXFBZBb_sk8Pt9kChKwyg6CTAJ_oazL0zbcnG6Wy
QSFy_VMKWvAKdkq7aQCc25xpfOyoKswQ.0akHGbgjP6.njJ44NjwvNmhKOv9
LGyrfgMEnq9joQxO7Niqyu825msl.gZ2SrXlY8kqL36cka.JDtic2vUPMJkm
tPL3WWLHRSNyhA4zP2a18672DFeZ64MbR_Du0bxns0fsZFxrU9eN0SHbA2bl
lxOyqWqKTZy6Li2Bvwt6_1.qRpjY89IQwF65doSn9cfTRyh.ZauKAV9YHZCO
6lmA4lBdZIqLGzOm7IfN4tFaC4PuwmC.GTI9j2UGo8P.KK0quCgr4oaKmkK6
xMsDHrLmGNvhUP41KwV13nJmRJ1bxvZ4N5jxPPpwyD6DS.gfyWJ1V9qgZvcB
W.dFdkTrMGGofOk3JecwRWkLAzulT90I3ZiVkDk2CLUAA6yVaZMl4ffhHSQA
uHr82NQzvGCXXRNDFnrtN6LB50k1gUor8dI92p55iCvirxeZtgkCdxh7lJKe
_1NHj.6UMF9ZXeID1AnXTYnFyzh1lxJqXBUwihJo3phKGMZhFnzXtV6MyY_y
hubzjy2FTQlAIBi75vIVogJfOIAXOh4q0Qggbfm_UjCQxLD9AFo4q6RFTAb.
F7DohADrBv6Qcy2_kkP.Ne7nR6QcMRMg8KzH6wmwKIlWXaFbo8l0Pt5kqZta
WcXj5fN1_AlC4z1jEA--
X-Originating-IP: [65.20.0.12]
Authentication-Results: mta1015.bt.mail.ir2.yahoo.com from=btinternet.com; domainkeys=neutral (no sig); from=btinternet.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpin23.bt.ext.cpcloud.co.uk) (65.20.0.12)
by mta1015.bt.mail.ir2.yahoo.com with SMTP; Fri, 10 Jan 2014 11:40:08 +0000
X-CTCH-RefID: str=0001.0A090207.52CFDC18.00F0,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Unknown
Received: from mailout02.c06.mtsvc.net (70.32.122.158) by smtpin23.bt.ext.cpcloud.co.uk (8.6.100.99.10223)
id 52C7612701A3CDD8 for myemail@btinternet.com; Fri, 10 Jan 2014 11:40:08 +0000
Received: from n36.c06.mtsvc.net ([205.186.184.7])
by mailout02.c06.mtsvc.net with esmtp (Exim 4.72)
(envelope-from <rex@smartergeek.com>)
id 1W1aRY-0000vQ-D7; Fri, 10 Jan 2014 03:40:04 -0800
Received: from [79.98.48.81] (port=44386 helo=mycomputer)
by n36.c06.mtsvc.net with esmtpsa (TLS1.1:DHE_RSA_AES_256_CBC_SHA1:256)
(Exim 4.80.1)
(envelope-from <rex@smartergeek.com>)
id 1W1aRX-0006fE-HR; Fri, 10 Jan 2014 03:40:04 -0800
From: "Our Email" <OurEmail@btinternet.com>
To: "my email" <my email@btinternet.com>,
"Contact3" <Contact3@scarmor.fr>,
"Contact4" <Contact4@.......gov.uk>,
"School Email1" <School Emial1@.......school.co.uk>
Subject: hey
Date: Thu, 10 Jan 2014 12:40:00 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To: Our Email
Content-type: Multipart/mixed; boundary="46CCFD75_08CF32E3_boundary"
Content-Description: Multipart message
Message-Id: <E1W1aRX-0006fE-HR@n36.c06.mtsvc.net>
X-Authenticated-User: 93224 rex@smartergeek.com
X-Spam-Status: "score=5.0 tests=CMAE_1, SHORTCIRCUIT version=3.3.1 cmae=v=2.1
cv=XKAJF2RE c=0 sm=0 tr=0 p=vCxJKmhDAAAA:8 a=nFDw1USY7jc3nQuNedvslA==:17
a=EqrLs1jmFqkA:10 a=0y2ISyEma3kA:10 a=HmCT5iXHAAAA:8 a=IIQeXsxtAAAA:8
a=BzEEe4x8AAAA:8"
X-Spam-Level: *****
Content-Length: 684

 

Email 3)

 

Delivered-To: myschool email address@.......school.co.uk
Received: by 10.76.6.42 with SMTP id x10csp93719oax;
Fri, 10 Jan 2014 03:40:03 -0800 (PST)
X-Received: by 10.43.71.65 with SMTP id yj1mr7381784icb.2.1389354003121;
Fri, 10 Jan 2014 03:40:03 -0800 (PST)
Return-Path: <holly.mountain@ryerson.ca>
Received: from mfe3.ryerson.ca (mfe3.ryerson.ca. [141.117.101.133])
by mx.google.com with ESMTP id w8si2412013igl.9.2014.01.10.03.40.02
for <myschoolemail@.......school.co.uk>;
Fri, 10 Jan 2014 03:40:03 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of holly.mountain@ryerson.ca designates 141.117.101.133 as permitted sender) client-ip=141.117.101.133;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of holly.mountain@ryerson.ca designates 141.117.101.133 as permitted sender) smtp.mail=holly.mountain@ryerson.ca
Received: from conversion-daemon.mfe3.ryerson.ca by mfe3.ryerson.ca
(Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007))
id <0MZ600A01O3GX600@mfe3.ryerson.ca> for
myschoolemail@.......school.co.uk; Fri,
10 Jan 2014 06:40:03 -0500 (EST)
Received: from localhost ([10.111.0.17])
by mfe3.ryerson.ca (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
2007)) with ESMTP id <0MZ6009SLODIVU30@mfe3.ryerson.ca> for
myschoolemail@.......school.co.uk; Fri,
10 Jan 2014 06:40:03 -0500 (EST)
Received: from mfe1.ryerson.ca ([141.117.101.131])
by localhost (outscan2.prodint.ryerson.ca [10.111.0.17])
(amavisd-new, port 10027) with ESMTP id SPBZqDLYQKxa for
<myschoolemail@.......school.co.uk>; Fri,
10 Jan 2014 06:40:01 -0500 (EST)
Received: from mycomputer ([77.34.166.236])
by mfe1.ryerson.ca (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
2007)) with ESMTPSA id <0MZ6005KLOBXZV00@mfe1.ryerson.ca> for
myschoolemail@......school.co.uk; Fri,
10 Jan 2014 06:40:02 -0500 (EST)
Date: Fri, 10 Jan 2014 12:39:54 +0100
From: Our Email <Ouremail@btinternet.com>
Subject: =?ISO-8859-1?Q?fw=3A_hi?=
To: Contact1 <Contact1@.......co.uk>,
My School Email <My School email@.....school.co.uk>,
Contact5 <contact5@ntlworld.com>,
Contact6 <Contact6 @ntl.com>,
Contact7 <Contact7@gmail.com>
Reply-to: Our Email0@btinternet.com
Message-id: <0MZ6005LSOEKZV00@mfe1.ryerson.ca>
MIME-version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Content-type: multipart/mixed; boundary="Boundary_(ID_o8UwAlevGRlJPC8k4btyFA)"
Content-description: Multipart message
X-Virus-Scanned: amavisd-new at ryerson.ca


--Boundary_(ID_o8UwAlevGRlJPC8k4btyFA)
Content-type: text/html; charset=UTF-8
Content-transfer-encoding: Quoted-printable
Content-disposition: inline
Content-description: HTML text

 

Passwords have been changed and a full antivirus scan on all devices have come back saying all is fine. The SSL option is enabled and the previous password should have been strong as it was just a random mix of Captitals,Lowercase and numbers.

 

 

Cheers,

James


jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.
0 Ratings
3 REPLIES 3
Highlighted
Guru
Guru
40 Views
Message 2 of 4

Re: BTYahoo email account sending spam (again)

Hi all,

 

Sorry to bring this up again. This is the 3rd or 4th time in the last month that it has happened.

 

It would seem the "Hackers/Spammers" have now decided to spoof our email address instead. Though they must have also saved our contact list as the spam emails supposedly from our Main BT email account containing a link have been sent again to our contact list along with some other unknown email addresses.

 

What is concerning is that they have been able to copy and save our contact list somewhere and have been regularly spoofing our main BT email account address to send out spam to our contact list and to others. 

 

It would also seem that this for the last 4 times this has happened, the Yahoo security protocols have temp disabled the account and requested to renew the password (even though when they did gain access to the account on several occasions last summer, the Yahoo security protocols didn't pick up on this)

 

I'm not sure what to do now. We have been using random letters, lower and upper cases, and numbers as the password (and trying not to use dictionary words), I have enabled SSL and HTTPS  for both webmail and IMAP.

 

I have created another account for them to use, as the our main BT account seems to be regularly used to send out spam to our contacts and to other people too.

 

Any way, here are some of the email headers from the last batch of spam email sent from our main BT email account last night.

 

email 1)

 

Delivered-To: ....@gmail.com
Received: by 10.194.26.8 with SMTP id h8csp162301wjg;
Mon, 10 Feb 2014 16:23:39 -0800 (PST)
X-Received: by 10.14.127.200 with SMTP id d48mr40179342eei.9.1392078219380;
Mon, 10 Feb 2014 16:23:39 -0800 (PST)
Return-Path: <carine.louisnard@orange.fr>
Received: from out.smtpout.orange.fr (out01.smtpout.orange.fr. [193.252.22.210])
by mx.google.com with ESMTP id t5si28976361eeo.85.2014.02.10.16.23.38
for < ....@gmail.com>;
Mon, 10 Feb 2014 16:23:39 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of carine.louisnard@orange.fr designates 193.252.22.210 as permitted sender) client-ip=193.252.22.210;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of carine.louisnard@orange.fr designates 193.252.22.210 as permitted sender) smtp.mail=carine.louisnard@orange.fr
Received: from mycomputer ([176.195.207.57])
by mwinf5d49 with ME
id QoP21n00Z1EqMVL03oPPWl; Tue, 11 Feb 2014 01:23:38 +0100
Message-ID: <31a0202561c721516a6afae3ecb224fd@mwinf5d49.me-wanadoo.net>
From: "Our Main BT Account" <OURMainBTAccount@btinternet.com>
To: "..." < ....@aol.com>,
" ...." < ....@yahoo.co.uk>,
" ...." < ....@wales.nhs.uk>,
" ...." < ....@gmail.com>,
" ...." < ....@btopenworld.com>,
" ...." < ....@aol.com>, " ....l" < ....@work.com>,
" ...." < ....@wood.co.uk>, " ...." < ....@arsenal.co.uk>,
"Info" < ....@farm.co.uk>, "info" <info@domain.com>,
" ...." < ....@btinternet.com>,
" ...." < ....@yahoo.co.uk>,
" ...." < ....@btopenworld.com>
Subject: Our Name
Date: Mon, 11 Feb 2014 01:23:23 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To:  ....@btinternet.com
Content-type: Multipart/mixed; boundary="30322C35_7571A140_boundary"
Content-Description: Multipart message

--30322C35_7571A140_boundary
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Content-Description: HTML text

=EF=BB=BF<html><head><meta http-equiv=3D"content-type" content: text/html;=
charset=
=3DUTF-8></head><body>http://muzikakademisi.org/adba/ckavuwdpa.elpqo</body></h=
tml>
--30322C35_7571A140_boundary--

 

 

 

email 2)

 

x-store-info:7YsnRco0gQJ3EyekdHv0zlwbSFmh6T19j+hXYC7bDk+ZgsAAkWl3xvnlVDv6VdG8eJsv9jCtwF7oQPZqhqkgVfeQY/P/EWucY1/auiahMNxruEMdihjPNInNXjpVDxhUvoY5HGeo2PA=
Authentication-Results: hotmail.com; spf=pass (sender IP is 184.173.73.184) smtp.mailfrom=mochi@dodoro.net; dkim=none header.d=btinternet.com; x-hmca=none header.id=OurMainBTAccount@btinternet.com
X-SID-PRA: OurMainBTAccount@btinternet.com
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0yO1NDTD0w
X-Message-Info: NhFq/7gR1vQ70P6XC3bOpBQ7zHj0HcWBPVfQGqeMlXD3Q5XqUzcCKI6QCFTu1gPd9kXJ4sJTzv5LIllvxownk8wXnUDVH4W9niw2JfNme/gOCXVDai/Yim0YxPJ+0SPLmDtRxYLX6o41xWDNZ3PhLGnSA2TVMCg8JvFwQ3iUtvDHkm7Jv1cRkPHdeMUAv62ljmsxNw28g9Xy9Sm8i9AEBwZsa5+yDcb1
Received: from pineapple.asmallorange.com ([184.173.73.184]) by SNT0-MC3-F19.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Mon, 10 Feb 2014 16:23:28 -0800
Received: from [188.114.62.97] (port=2793 helo=mycomputer)
by pineapple.asmallorange.com with esmtpa (Exim 4.82)
(envelope-from <mochi@dodoro.net>)
id 1WD18H-002gwJ-5V; Mon, 10 Feb 2014 19:23:25 -0500
From: "Our Main BT Account" <OurMainBTAccount@btinternet.com>
To: "...." <....@theproteagroup.com>,
"...." <....@btconnect.com>,
"...." <....@3663.co.uk>,
"...." <....@domain.com>,
"ME" <....@hotmail.co.uk>,
"...." <....@btinternet.com>,
"...." <....@openworld.com>,
"...." <....@wales.nhs.uk>,
"...." <....@googlemail.com>,
"...." <....@btinternet.com>,
"catsfouryou" <catsfouryou@yahoo.co.uk>,
"...." <....@hotmail.com>,
"...." <messages@parentmail.co.uk>
Subject: Our Name
Date: Mon, 11 Feb 2014 01:23:21 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To: OurMainBTAccount@btinternet.com
Content-type: Multipart/mixed; boundary="303221E4_00F84143_boundary"
Content-Description: Multipart message
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - pineapple.asmallorange.com
X-AntiAbuse: Original Domain - hotmail.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - dodoro.net
X-Get-Message-Sender-Via: pineapple.asmallorange.com: authenticated_id: mochi@dodoro.net
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: mochi@dodoro.net
Message-ID: <SNT0-MC3-F19fo7Zy2J0020e313@SNT0-MC3-F19.Snt0.hotmail.com>
X-OriginalArrivalTime: 11 Feb 2014 00:23:28.0789 (UTC) FILETIME=[7C96A450:01CF26BF]

--303221E4_00F84143_boundary
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Content-Description: HTML text

=EF=BB=BF<html><head><meta http-equiv=3D"content-type" content: text/html;=
charset=
=3DUTF-8></head><body>http://ferhatpasa.net/dvwsko/vrhyt.bztrn</body></html>
--303221E4_00F84143_boundary--

 

 

 

______________________________________

 


Cheers,

James


jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.
0 Ratings
Highlighted
Distinguished Sage
Distinguished Sage
31 Views
Message 3 of 4

Re: BTYahoo email account sending spam (again)

A bit late now but my advice would be not to keep contacts on BTYahoo. Far better to use an email client and keep contacts there.

 

If you do have to keep them on your BTYahoo account leave the @ out of the address and it might stop the automated process that spammer probably use to harvest the email addresses from working.

0 Ratings
Highlighted
Guru
Guru
26 Views
Message 4 of 4

Re: BTYahoo email account sending spam (again)

Thanks for the help 


jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.
0 Ratings