Neighbour had BT account hacked. password, recovery mobile and recovery email all changed. Result - 1. email to address list asking for money 2. replies from these people being forwarded to spammer email address in BT (auto-forward) settings.
Sorted with BT, we thought. Half an hour later, the auto-forward has been reactivated. How are they doing this!!! I assume there's malware/key logger on the computer. OR their router has been hacked (is this even possible).
I've got their computer at my house. No signs of a repeat problem (auto-forward settings being messed around with). Bloody hell.
EDIT: BT chap said we should get a separate email with instructions to "clear" MyBT details. No email was received and I'm wondering if this is significant.
Could this explain what has happened? Solved: Re: How to prevent malicious fault report and call... - Page 6 - BT Community