MTS Mail getting hacked repeatedly

  • 1
  • Problem
  • Updated 2 years ago
Ever since I switched over to MTS Mail, my email account has been hacked several times (I think today was the 5th time). I have run virus scans on my laptop, I have changed my password repeatedly, changed my security questions. I had been using the Microsoft Outlook program to send and receive mail, and thought maybe it wasn't a secure connection through that program so I removed the MTS address from it as well. Currently my husband uses his iPhone and iPad to receive emails from our MTS address. It's downright annoying and I don't know how else to stop it. We are receiving the same spam emails from other MTS customers. The emails usually read, "Hey! Check this out!" Followed by a spam link. Please help, it's beyond frustrating. I have already opened an Outlook account and have changed my email address with most places. But as long as that email address exists, it's still sending garbage.
Photo of Meghan Barkley

Meghan Barkley

  • 150 Points 100 badge 2x thumb

Posted 2 years ago

  • 1
Photo of Tennille

Tennille, Social Media Coordinator

  • 15,524 Points 10k badge 2x thumb
Hi Meghan, 

We know spam emails are really annoying and inconvenient to say the least! Can I get you to clarify, the messages look like they're coming from another MTS Mail customer? I do know there are emails circulating where spoofing of others emails is occurring using the MTS email addresses. 
If you could forward a few of these emails to our email address community@mts.ca I'll send them to the mail team to see if they're the same as the other spam emails that customers have been complaining about. 
There is currently a fix being worked on to deal with spam in a more efficient manner. 

Tennille 
Photo of Meghan Barkley

Meghan Barkley

  • 150 Points 100 badge 2x thumb
Hi, it's my MTS Mail account that is sending the spam. I am receiving it on occasion from other MTS users but my main concern is that somehow my account is regularly used to send spam.
Photo of CoryB

CoryB, Champion

  • 27,758 Points 20k badge 2x thumb

You may also want to put in place a strong password. Common guidelines are:

Make up a long phrase that makes sense to you.

Pick letters from that phrase, commonly first letters of the word.

Include lower case, UPPPER CASE, numbers and special characters (things you can type not in the first three categories). Have at minimum one of each group.

Try to avoid including the only number or special character at the end. (ie SnowDay2015!)

Also try to avoid using complete words or names any in language.

For example this phrase:

MTS # 1 For Home Internet Service in Manitoba: could be

M#1fhiIMB

Don't use that though as this very discussion has likely compromised that.

Here is a link with comedian John Oliver and Internet privacy spokesperson Edward Snowden discussing how to create strong passwords. PS don't use any they suggest in that example either as they are likely all hot listed by groups trying to compromise accounts.

https://youtu.be/yzGzB-yYKcc

Photo of Meghan Barkley

Meghan Barkley

  • 150 Points 100 badge 2x thumb
Thanks, the new password followed those guidelines, but still got past it. :/
Photo of Clifford Lewis

Clifford Lewis, Champion

  • 27,088 Points 20k badge 2x thumb
So what you are saying is they actually showing up as being sent out in your sent folder (either outlook or the web based client) .

If they are not in there I would tend to agree with Tennille  that your email address is being spoofed by somebody else.
Photo of Meghan Barkley

Meghan Barkley

  • 150 Points 100 badge 2x thumb
They are not in my sent folder, but when the email won't go through it shows up in our inbox as returned mail (old or invalid email addresses). Yesterday there were 208 returned messages.
Photo of Tennille

Tennille, Social Media Coordinator

  • 15,524 Points 10k badge 2x thumb
If they're not in your sent folder then they're not being sent by your account. Since the ones that cannot be delivered are being sent back to you it sounds like the spoofer has it set up pretty well to not be found out.
It is frustrating and I'm sorry that you've had to deal with this. :(

Tennille
Photo of Clifford Lewis

Clifford Lewis, Champion

  • 27,088 Points 20k badge 2x thumb
Somebody somewhere has gotten your email address (could have even accessed it from the contacts list of somebody else you had emailed if their system was not protected properly) and as Tehnnille has said your address has been spoofed by others.

If it was me I would build an email filter in either outlook or the MTS web based page and delete these invalid address emails out of my inbox automatically.  You may have to do a delete all in your deleted items folder from time to time to really get rid of them but at least they would not clog up the inbox.
 
The only downside to the filter  I am suggesting is that you would not get valid returns of your emails in your inbox if you did put in the wrong address.
Photo of Meghan Barkley

Meghan Barkley

  • 150 Points 100 badge 2x thumb
Okay, so does that mean there's no way to stop the emails from being sent, even if it's someone spoofing our email address? It's frustrating for people who actually email us using that address (although, like I said we are switching over to Outlook) that regularly receive spam from our MTS address.
Photo of Clifford Lewis

Clifford Lewis, Champion

  • 27,088 Points 20k badge 2x thumb
there is no way to stop it until the people sending it move on to another address. Most spammers work offshore and go to great lengths to keep from being found out.

I think of it as the equivalent of the telephone calls that go out from somewhere else that use a fake number to show up on call display.   One that comes to mind is the scam where a name/ number for Revenue Canada shows up and a crook says you owe back taxes

Sometimes the email headers may show something to people that know more about that sort of stuff than I do.