Korean Job Discussion Forums

[Peeping Tom]

Someone stole my e-mail account a few months ago, and now I see that someone is trying to get access to my account on another website. In other words, when I try to log in I get a "Account temporarily disabled due to excessive failed login attempts" message. I have never given my password to anyone, nor should anyone have reason to know it. Since this never happened to me before, and now it's the second time within a few months, I think it might be the same person. Any advice on how I can find out who? Or at least general location of the person?

[JAWINSEOUL]

The company that you hold your account with will be able to find out the IP address of the computer the hacker used.

Although I assume this will have to be done through the police and I doubt they will care enough to even look into it.

Any respectable hacker of course may be able to stop them, by rerouting their work.

The only option you may have is to email them when they gain access. They are probably running a program to find out your code and will gain entry eventually.

BEST OPTION CALL THE PROVIDER AND HAVE THEM DISABLE YOUR ACCOUNT OR TAKE IT OFFLINE SO YOU CAN RETRIEVE YOUR EMAILS.

Keep me posted ��good luck

[splok]

So long as your password is a good one, I wouldn't worry too much about the failed logins, but it should provide a good reason to make sure that all of the passwords you use are highly secure. The fact that you've had an email account comprimised recently would definately be a cause for alarm though.

There are two likely possibilities imo. Someone you know is doing it and was able to guess your password because you used something for a password that you shouldn't have. People often use names of family or friends, birthdates, liscense plate numbers, ss numbers, etc. etc. etc. for passwords, and then they wonder how someone was able to "hack" their account. If that's not the case, you probably have a keylogger installed on your system. It could have gotten there through something you downloaded or through a vulnerability in some software that you're using.

In either case, to be on the safe side, you should assume that your computer and every account that you've logged into since the first problem are potentially comprimised. I would go to a different computer and change the passwords to everything you do online, and don't just change the pw by one letter or whatever. Make it entirely different and at least a random combination of letters and numbers. Then contact the email provider and let them know that your account has been compramised. There should be a link for that sort of thing somewhere on the site. Check the help or faq if it isn't readily apparant. Depending on what information you provided when you registered the account, they may be able to reset your password, allowing you to regain control of your account. Do the same thing for the account that you're concerned over now.

Then go back to your computer, make sure all the software you're using is current on updates, especially windows, and run some good virus protection software and spyware software. Here are three links for free ones. I would run all three of these at the very least.

http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10503939.html?tag=lst-0-2

http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10401314.html?tag=lst-0-1

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1


The only realistic way you're going to be able to find out who is doing this is through some social engineering. If the person is actively using your old email account, you could contact them and see what happens. Your email provider won't give you the person's ip address though. Now, if the person gets access to your account on a privately run website, you might be able to get the admin to give you all of the ip's that your account has logged in from as well as what other usernames have been logged in from those ip's. You didn't mention what kind of site it was, but if it is any kind of forum, this information will be easily available to the admin and possibly the mods.

[Hollywoodaction]

[chiaa]

Check with the girlfriend or wife....

[dbee]

...

[dbee]

[Bulsajo]

Check out thstats for identity theft (which is what I'm assuming this is a part of) in cnada (as an example, because the Cdn stats are posted; I can't speak for other countries but it would be grerat if somebody had some links):

https://www.recol.ca/trendsandstats.aspx

"You've been watching sneakers too many times."


Running a program to find an email password?
Sure, not impossible, but let's remember this is an email account, not a bank vault, or even an online banking account. But speaking of that, I hope the OP doesn't have any sensitive emails saved (like from your bank, or when a site/business sends you a password by email, etc.) Sensitive emails saved in an online email account like Yahoo or Gmail combined with a not very secure password can really F__k you up these days.
(Remember I'm the moderator who had his password guessed here by some psyochotic who was crazy/bored enough to spend time trying obvious passwords on the Dave's mod log-ins; arrogance and thinking no one is really paying attention to you can get you really f__ked up too).

[splok]

[dbee]