New (to me) form of spam email
Hi, I recently received a spam email (ostensibly from a friend, but it wasn't) the form of which I hadn't seen before and I'm trying to find out what the implications are for my freinds security.
My friend has a yahoo email addy that she's used for donkey's years and I got an email from an address where the bit for before the @ was correct but the segment following the @ was completely bogus.
The display names for the sender <her> and recipient <me> were correct.
Hi <me>
Dodgy link
<her>
Sent from my iPhone
So the spammer clearly had access to her contact list and knew the form of her email address (but presumably that hasn't been compromised as it wasn't actually sent from there and she can still login to that address without issue).
I got her to change her a/c password JIC but am not sure how/where she's been compromised. She has access to various windows pc's an android phone and an iPad (second-hand). I think she registered with facebook with this yahoo email, but I'm not clear if she shares much info with them (i.e. like her contacts).
Should she be worried?
Biting the hand that feeds IT
