bonjour,
Des clients reçoivent des mails que je n'ai pas envoyés, avec mon adresse mail chez OVH. J'ai suivi la procédure indiquée par OVH en changeant mes mots de passe, rien n'y fait … Avez-vous une solution ??? merci
Bonjour @AstridL2,
Disposez-vous d'un site internet avec l'adresse e-mail visible ou un formulaire de contact ?
^FabL
oui exactement un site et un formulaire de contact
oui exactement un site et un formulaire de contact
Bonjour,
quelle est l'adresse de votre site, et/ou pourriez-vous montrer les en-têtes d'un des mails reçus par un client ?
Bonjour mon site Internet www.astridlink.com. Le problème c'est que les deux personnes ayant reçu (du moins qui m'en ont informée) l'ont placés dans leur corbeille. <br />Mais j'en ai reçu un hier un mail du hacker qui ne laisse aucun doute sur ses intentions malveillantes : <br />j'ai fait après un copié/collé de ce que vous appelez entête, j'avoue ne pas y comprendre grand chose et être bien désarçonnée. Mon métier est artiste peintre et pas professionnel de l'informatique !<br />Si vous pouvez m'aider , merci<br />-------------------------<br />Hi,<br /><br />I am a hacker, and I have successfully gained access to your operating system.<br />I also have full access to your account.<br /><br />When I hacked into your account, your password was: mtart2019<br /><br />I've been watching you for a few months now.<br /><br />The fact is that your computer has been infected with malware through an adult site that you visited.<br />If you are not familiar with this, I will explain.<br />Trojan Virus gives me full access and control over a computer or other device.<br />This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.<br />I also have access to all your contacts and all your correspondence.<br /><br />Why did your antivirus not detect malware?<br />Answer: The malware I used is driver-based, I update its signatures every 4 hours. Hence your antivirus is unable to detect its presence.<br />I made a video showing how you satisfy yourself in the left half of the screen, and the right half shows the video you were watching at the time.<br /><br />With one mouse click, I can send this video to all your emails and contacts on your social networks.<br />I can also make public all your e-mail correspondence and chat history on the messengers that you use.<br /><br />If you don't want this to happen, transfer $1490 in Bitcoin equivalent to my Bitcoin address (if you do not know how to do this, just search "buy bitcoin" on Google).<br /><br />My Bitcoin address (BTC Wallet) is: 1LzGn637qgKdsw7UH6S2A17vEbwL8ytHXY<br /><br />After confirming your payment, I will delete the video immediately, and that's it. You will never hear from me again.<br />I will give you 50 hours (more than 2 days) to pay. I will get a notice, when you open this email, and the timer will start.<br />Filing a complaint somewhere does not make sense because this email cannot be tracked like my Bitcoin address.<br /><br />I never make any mistakes.<br />If I find that you have shared this message with someone else, the video will be immediately distributed.<br /><br />Best regards!<br /><br />-------------------------<br /><br />eturn-Path: astridlink.com><br />Delivered-To: contact@astridlink.com<br />Received: from localhost (HELO queue) (127.0.0.1)<br /> by localhost with SMTP; 18 May 2023 23:39:04 +0200<br />Received: from unknown (HELO output33.mail.ovh.net) (192.168.13.136)<br /> by 192.168.9.6 with AES256-GCM-SHA384 encrypted SMTP; 18 May 2023 23:39:04 +0200<br />Received: from vr23.mail.ovh.net (unknown [10.101.8.23])<br /> by out33.mail.ovh.net (Postfix) with ESMTP id 4QMjzD0BLdzTKQnVj<br /> for astridlink.com>; Thu, 18 May 2023 21:39:04 +0000 (UTC)<br />Received: from in73.mail.ovh.net (unknown [10.101.4.73])<br /> by vr23.mail.ovh.net (Postfix) with ESMTP id 4QMjzC3FBVz3G1LqH<br /> for astridlink.com>; Thu, 18 May 2023 21:39:03 +0000 (UTC)<br />Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=84.224.122.234; helo=netacc-gpn-4-122-234.pool.yettel.hu; envelope-from=contact@astridlink.com; receiver=contact@astridlink.com <br />Authentication-Results: in73.mail.ovh.net; dkim=none; dkim-atps=neutral<br />Received: from netacc-gpn-4-122-234.pool.yettel.hu (netacc-gpn-4-122-234.pool.yettel.hu [84.224.122.234])<br /> by in73.mail.ovh.net (Postfix) with ESMTP id 4QMjz96fRcz2CKXGL<br /> for astridlink.com>; Thu, 18 May 2023 21:39:01 +0000 (UTC)<br />Message-ID: <645DF1033CC8AFCEF75BA9966205645D@RGU7V1PVA49><br />From: astridlink.com><br />To: "mtart2019" astridlink.com><br />Subject: [SPAM] Your account is hacked. Your data is stolen. Learn how to regain access.<br />Date: 19 May 2023 00:08:53 +0100<br />MIME-Version: 1.0<br />Content-Type: text/plain;<br /> charset="iso-8859-1"<br />Content-Transfer-Encoding: 7bit<br />X-Priority: 3<br />X-MSMail-Priority: Normal<br />X-Mailer: Microsoft Outlook Express 6.00.2900.5512<br />X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512<br />X-OVH-Remote: 84.224.122.234 (netacc-gpn-4-122-234.pool.yettel.hu)<br />X-Ovh-Tracer-Id: 11166393804538096812<br />X-VR-SPAMSTATE: SCAM<br />X-VR-SPAMSCORE: 600<br />X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedvhedrfeeigedgtdduucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuqfggjfdpvefjgfevmfevgfenuceurghilhhouhhtmecuhedttdenucgoufgtrghmqdeugedtkedqtdekqdeuvfevucdlfedttddmnednodeuvfevqdfvhhhrvggrthhsqdfuvgigthhorhhsihhonhculdeftddtmdenucfjughrpefkhffvufffgggtgffrigfoqfesthejjedtuddtudenucfhrhhomhepoegtohhnthgrtghtsegrshhtrhhiughlihhnkhdrtghomheqnecuggftrfgrthhtvghrnhepveetvdefvdevjeffteetvdelkedtudetgeeileejkefhveevjedtkeevvddutdehnecukfhppeekgedrvddvgedruddvvddrvdefgeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeekgedrvddvgedruddvvddrvdefgedphhgvlhhopehnvghtrggttgdqghhpnhdqgedquddvvddqvdefgedrphhoohhlrdihvghtthgvlhdrhhhupdhmrghilhhfrhhomhepoegtohhnthgrtghtsegrshhtrhhiughlihhnkhdrtghomheqpdhnsggprhgtphhtthhopedupdhrtghpthhtoheptghonhhtrggtthesrghsthhrihgulhhinhhkrdgtohhmpdfovfetjfhoshhtpehvrhdvfedpshhpfhepshhofhhtfhgrihhlpdgukhhimhepnhhonhgvpdhgvghokffrpefjfgdprhgvvhfkrfepnhgvthgrtggtqdhgphhnqdegqdduvddvqddvfeegrdhpohholhdrhigvthhtvghlrd<br /> hhuh<br />X-Ovh-Spam-Status: SPAM<br />X-Ovh-Spam-Reason: vr: SCAM; dkim: disabled; spf: disabled<br />X-Ovh-Message-Type: SCAM<br />X-Spam-Tag: YES
The fact is that your computer has been infected with malware through an adult site that you visited.
If you are not familiar with this, I will explain.
pfffffff c'est tout du bidon, ne tombez pas dans le panneau ! Faites une recherche rapide sur internet si vous ne croyez pas ce que je vous dis.
Par contre si le mot de passe cité est bien à vous, c'est que ce mot de passe a été hacké sur un service, voyez le site haveibeenpwned.com
Dans ce cas, considérer que vous devez changer le mot de passe mtart2019 par autre chose partout où vous l'avez utilisé !! (et utiliser des mots de passe différents pour chaque service) !!