2
1
Over the past two days I've gotten two spam emails whose From:
lines contained the names of people I know, but with totally incorrect email addresses. Both contacts are Facebook friends of mine, but I've only conversed via email with one of them.
Furthermore, neither person is actually in my email contact list. I'm using Apple's Mail 6.3 on OS X 10.8.3.
My question is: whose account got compromised here? I'm wondering if it's my own, since the one purported sender doesn't even have my email address (that I'm aware of). And for that same reason, I'm wondering if the compromised account is my Facebook one rather than my email one.
It's theirs probably, they have a virus that is sending out emails. The likeliest explanation is that the contact you think does not have your email simply does. – terdon – 2013-06-02T18:24:27.793
Change your password just in case. If you've got a yahoo account then definitely change your password! – barlop – 2013-06-02T18:29:54.987
1Is your list of friends public? If so, there hasn’t necessarily been any compromise. If a miscreant got your email address somehow (maybe by guessing, maybe from some site where you post non-anonymously) and typed it into Facebook’s “find friends” text field, he will have learned your Facebook name, from which he can get your friends’ names (as known to Facebook). It’s then, of course, a simple matter to send you email where the textual part of the From name is one of your friends’ names. // But still, it seems like a good time to change your password. – Scott – 2013-06-02T21:06:27.490