Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Couple of days back spam mail(screenshot link) was sent to all my contacts from my yahoo account, and in my account activity page there is a yahoo partner logged in, from Peru (screenshot link) during that time.

I have reset my PW, security question, checked alternate email address and removed 3 links (e.g. tripit.com) from website connections, which I don't remember adding.

Can someone please confirm that this mail was sent by my website connections, and not sent by a virus or key logger which is stealing my password.

http://wikisend.com/download/349080/spam mail.png http://wikisend.com/download/403024/activity log.png

Thanks, kiran

share|improve this question

closed as too localized by Noordung, AJ Henderson, Xander, schroeder, Adnan Jun 17 '13 at 20:47

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

4  
I believe this is out of the scope of this site. Also, why are the screenshots on Wikisend and not embedded here? –  Travis Pessetto Jun 17 '13 at 19:37

1 Answer 1

Lately, it has been very common for e-mails to be spoofed as if they are from someone on your contact list or on your Facebook friends. These often don't require actually compromising the account and are instead simply faked and sent. The best way to determine if this is the case is to look at the header of one of the e-mails and see if it actually resolves from a genuine Yahoo mail server or not. If not, you have nothing to worry about.

If it does, then I'm not sure there is a good way to tell what the origin of the message is unless there is some info in the activity log or in the header of the message to indicate how it was sent. Your best bet would be to contact Yahoo and ask them for assistance.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.