hacker sending from hotmail, nothing stops it, not joe jobbing

1

1

My partner's hotmail account was hacked. She changed the password. The account is still sending spam emails from the hacker.

Now, I know all the usual suggestions, and none of them are going to work. The only place this account is accessed from at any time is a laptop with no hard drive, running an up to date linux live cd. This means every boot is a clean system. No keyloggers or viruses of any kind are in operation. No device accessing the account has been compromised. The problem appears to be entirely at the server end. How do we fix it?

My current advice to her is going to have to be disable the account and avoid using hotmail if there is no workable solution. This is not a joe jobbing hack as the sent messages are in the sent folder.

Frustratron

Posted 2013-10-20T00:55:48.520

Reputation: 11

Question was closed 2013-10-20T09:00:28.140

1Are you sure it's really being sent from Hotmail, and not just showing her name in the header "From" field? The latter is far more common. You should view the full header to be sure of the sending server. – Debra – 2013-10-20T00:59:10.527

I checked, and I searched who-is IP search to confirm. The header data shows a microsoft hotmail server. Specifically 65.55.116.109, or 65.55.116.74 (checking two separate examples of the hacker's messages) – Frustratron – 2013-10-20T01:22:27.907

sounds like a first! could be the password change is emailed to a recovery email address and that needs changing? could be the passwords she is using are obvious or she emailed them to herself or something. Could be there is a god and he's having a laugh with you, that's how odd it is! – barlop – 2013-10-20T04:12:53.117

1Also turn on two step authentication and delete all App passwords in case its already turned on. I don't think it would that easy to sabotage hotmail servers into sending spam email without any user/client side software intervention... – tumchaaditya – 2013-10-20T06:54:10.077

Answers

1

Turn on two step authentication and if you already have it turned on, delete all app passwords.

I don't think it would that easy to sabotage hotmail servers into sending spam email without any user/client side software intervention. Are you sure the email account is not configured with any other device?

tumchaaditya

Posted 2013-10-20T00:55:48.520

Reputation: 3 624