A family member contacted me yesterday saying their email has been hacked and that some other family members received spam emails from their account.
For this example, lets say the hacked family members account email address is John1234@gmail.com. I checked my spam folder and there was what appeared to be an email from this family member. The senders name was John1234 and the subject read "Hey Dan", which is of course my name. I looked at the email address that the email was sent from and it was not the family members email address, John1234@gmail.com, but rather John1234@williamcody.com.
I informed the family member of what was actually happening and that their account was not hacked, but suggested a password change anyways.
Now, this family member has used the same username, John1234, for 10+ years and I'm sure they have been a part of many chain emails in the past. I'm assuming this spammer is getting the other family member emails from this or a similar method.
The question is, how can I prevent this from happening again? My spam filter caught the email, but other family members spam filters did not. The website the fake email account is hosted on looks like it hasn't been touched in a few years. Can I assume that the website owner is unaware?