Thanks for this.
I've spent days on this now talking online to BT and in phone calls.
BT insist they cannot access personal emails.
However eventually I did speak to someone at support who found a way to delete the "avanab" manager. The person could do nothing about the blocked senders though. The suggestion was to create a new BTID, same email address and hopefully no emails would be lost but the blocked senders list would be empty.
I'm loath to do this as the account holder is quite elderly and uses the email (IMAP connection) as an archive. I would hate to be the one to lose this for her.
Moving on. I did unearth a threatening email suggesting the account had been hacked. The date of this email ties in with time from which all the blocked senders appeared i.e. no more emails from paypal and the like after that date.
The user may have clicked on a link in the email. I looked at the real internet headers of the email and found it came from Duxharmobles.accesscam.org. A quick search on WHOIS revealed a bit more information that it hosted by dyno.com. Doesn't help a lot and very difficult to prove anything.
I'm really looking to undo the damage. A simple addition to webmail or the apps allowing selection and mass deletion is all it would take. BT should be encouraged to do this themselves.
I did track the network traffic to see how adding and deleting blockers was done and can see that it might be possible to inject multiple packets to add the offending list of blocked emails. Probably possible to do and certainly more effort than the 10 hours of manually clicking on each one. You could even decompile the Android app, modify it and reinstall it with the new feature.
Perhaps the approach should be "I can no longer use Paypal, Facebook, other big names as BT email blocks any correspondence they try to send me".
I'm rabbiting on now.
