emails hacked and sent folder deleted

[Mountgrove]

Hi my email account has been hacked.

I have lost my sent folder.

Afaik this cannot be restored ? or can it ?

I checked trash etc and have enabled 2FA

This means the password cannot be reset I guess and if they attempt to logon on from another device , they will not be able to do so without the second stage of 2FA for the passcode , is this correct or do I need to go a step further to ensure no further disruption ?

BTW if anyone is reading this and has seen a BANNER telling you that your password or account has been compromised (It is normally each time you logon) for the sake of less than 5mins, please do not ignore it !

I guess it is fortunate that , the inbox is still there. But I will notify my bank anyway.

Why do the perps delete the Trash Folder , or has everything in my inbox also been forwarded?

TIA

[licquorice]

The Sent folder can't be deleted, it is a 'special' folder.

Why do you think you have been hacked?

[Mountgrove]

hi all my contacts received a suspicious folder and my sent folder contents has no items before today/

Sorry my mistake , the contents (all the emails in the sent folder have gone and I checked the trash folder).

Kr

[Mountgrove]

Sorry, The stress is making write a lot of typos.

All my contacts received a strange / suspicious email .

And all the emails in my sent folder were missing . 

There was a rule setup to autoforward and to an outlook.com address that I have never used or created.

(Settings>Mail>autoForward)

An my rules for incoming rules had been changed .

(settings>Mail>Rules)

I have deleted both rules.

What else should I action ?

Kr

[gg30340 · Accepted solution]

Have a read through this link and all the sub links and take the advice that is given.

https://www.bt.com/help/email/email-security/how-can-i-tell-if-my-email-account-is-no-longer-secure

You should not change any passwords until you are sure there are no forwarding and rules set up.

You should advise all your contacts that you have been hacked and to treat any emails purporting to be you with caution.

You should notify your bank etc that you have been hacked and if you use online banking you should change your passwords.

You should do a malware/virus scan of your device(s) 

You can not "unsteal" all the information and your contacts details that were stolen and while it might be a bit of a chore I would suggest that the best course of action would be to stop using that email address and advise your contacts accordingly. This will allow your contacts to delete any emails immediately that come from that email address without having to worry if they are from a hacker/scammer.

[Mountgrove]

Thanks,

Is there a way to enable 2FA all the time even on the devices you use regularly such as laptop or phone.

I have a suspicion that they may have been able to reset my password on My BT and now the device they used is "recognised" because I have had to reset it again,

TIA

[gg30340]

As far as I am aware you can not set 2FA to activate every time if you have already marked the device as a trusted device.

I am unaware of how to delete trusted device from the 2FA system. I might delete the trusted devices if you turn 2FA off and then back on but as I have said I don't know if that will work or not.

As regards changing your MyBT, make sure that where 2FA sends its passcode is correct and that where BT will send recovery details are correct.