Hacked emails ?

ttoli

Hi

Found this in My spam Folder, is it spam or should I be concerned ?

"Hi!

As you may have noticed, I sent you an email from your account.
This means that I have full access to your account: At the time of hacking your account(xxxxxx@hotmail.co.uk) had this password: xxxxxx

forgotmyname

Yes, be concerned that you needed to ask the question.

Where have you used your email address, did the password get stolen?
haveibeenpwned.com clickable link https://haveibeenpwned.com/

onomatopoeia99

I get them. The ones that include a password give my dialup password for Demon Internet. I've had ADSL with a different ISP (and different password) for sixteen years.

PDC

There is a brace of these doing the rounds at the moment.

Generally its fake and the email won't have been sent from your account, at least in all the ones I've seen. It just looks that way as its been coded to do so.

As mentioned some of them show old passwords which have been associated with your email address at some point in an attempt to make their claims seem more legitimate.

grumpycrab

ttoli wrote: »

At the time of hacking your account(xxxxxx@hotmail.co.uk) had this password: xxxxxx

should I be concerned ?

Stating the obvious, but if you still use that password anywhere, change it asap.

DocQuincy

Other than ensuring you don't use that password, no, you do not need to do anything.


Using a password manager (like 1Password) will prevent this kind of thing ever happening since a) you should end up using a different password for every login and b) the passwords you use will be cryptographically secure and they won't be able to work out what it is from a database hack (unless the site is storing your password in plain text).


The worst case scenario with a password manager would be a single password change rather than worrying they can now access other accounts because you reused the same password.


In this day-and-age using the same password twice and using a password with a pattern is asking for trouble. Also, always use 2FA where available.