Someone's sending spam from my email address -how do I stop it

[LongTimeLurker]

I've noticed recently with some downloads I get error messages stating "too many redirect".

 

And also using Lazada I get "too much traffic" messages.

 

And today a mate advised me that he's received a spam email from my address.

 

So is this a bot using my computer for spamming? And how can I get rid of it?

[moldresistant]

What is your email service provider (Gmail, Outlook, Yahoo, etc.)?

 

Are you using your own domain name (you@yoursite.com)?

[moldresistant]

Check if your email has been in a data breach: https://haveibeenpwned.com/

[LongTimeLurker]

1 minute ago, moldresistant said:

What is your email service provider (Gmail, Outlook, Yahoo, etc.)?

 

Are you using your own domain name (you@yoursite.com)?

 

Yahoo and using Yahoo domain name.

[LongTimeLurker]

3 minutes ago, moldresistant said:

Check if your email has been in a data breach: https://haveibeenpwned.com/

 

So now what do I do?

[Crossy]

Task-A => Change your password.

 

It's quite possible that the spam isn't actually coming from your address, it's not at all difficult to spoof a "from" address.

 

[moldresistant]

8 minutes ago, LongTimeLurker said:

 

So now what do I do?

That means your accounts/passwords are being shared and sold on the darknet. They're out there now so don't use those passwords ever again. You should logout all other sessions and change your password on each site listed under "Breaches you were pwned in". It's best practice to use a different password for every site, so if this happens again they can't access your other accounts with the same password. You can use a password manager like Keepass to make this easy.

 

You might want to make a new email account too.

 

[LongTimeLurker]

2 hours ago, moldresistant said:

That means your accounts/passwords are being shared and sold on the darknet. They're out there now so don't use those passwords ever again. You should logout all other sessions and change your password on each site listed under "Breaches you were pwned in". It's best practice to use a different password for every site, so if this happens again they can't access your other accounts with the same password. You can use a password manager like Keepass to make this easy.

 

You might want to make a new email account too.

 

 

A different email address with a different password WAS compromised last month. Well at least Gmail notified me that someone had tried to login with my password from an unrecognised machine, but I was able to change the password.

[LongTimeLurker]

2 hours ago, moldresistant said:

You should logout all other sessions and change your password on each site listed under "Breaches you were pwned in".

 

There appears to be only one that I recognise, LinkedIn

[ThailandRyan]

14 minutes ago, LongTimeLurker said:

 

There appears to be only one that I recognise, LinkedIn

You were scraped, and your information sold onward into he dark web.  You need to log off of all accounts and change each password for active accounts you use and even then you may have accounts with other companies that you forgot you have....