Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

One customer got their email account "frozen" because it sent 9000 emails and some bounced back.

I suspect something got hacked, but I have no idea what to do. I cannot figure out what was hacked. It could be the mail server (hosting, not exchange) or the computer. If it is the computer, what can I use to scan it and find the program that sent thousands of emails?

The email addresses are NOT from my contacts.


migration rejected from Jun 16 '13 at 0:50

This question came from our site for pro webmasters. Votes, comments, and answers are locked due to the question being closed here, but it may be eligible for editing and reopening on the site where it originated.

closed as not a real question by Adi, Xander, Gilles, TildalWave, NULLZ Jun 16 '13 at 0:50

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Sounds like your customer has either been key logged (doubtful), or the more commonly your customer has signed up on various registrations sites using the same password as the password to access the email account. Alot of sites don't hash the password correctly and their databases get stolen without the webmaster even knowing.. – Simon Hayter May 24 '13 at 17:39
I need a tool to find where all this email come from ! – menardmam May 24 '13 at 19:15
Do you have the logs from the mailserver of where these email were sent out? – KennyC Jun 13 '13 at 3:38