I think that my Hotmail and/or S4 has been hacked. Last Monday I received word that a strange email was sent from my account with a link to skin care or something like that, so I changed my PW. On Friday, I received an email from Outlook that says my account has been compromised and I should change my PW, so I did, again. Sunday night, I'm told that another strange email was from my Hotmail account, so I change my PW again, 3rd time within a week. Each PW wasn't overly hard, but always contained both letters and numbers, so not super easy to crack I wouldn't think. So I started to try to track down the source, I removed email accounts from my phone on Monday (I have the stock email app set to check 2 accounts and have yet to have an issue with the second account). I also noticed in the Hotmail access log that my account was being accessed in 2 other states while all this was going on. So, all was going well and today I set up the email app with my Hotmail account info so I could check my email from my phone. Within 2 hours, my account was accessed from out of state again, but as far as I can tell nothing was sent.
I've read that its pretty simple to send out an email using an account that you don't have access too directly, just set up to use as a sent address, nothing shows up in my sent items so that would support this possibility. It's the account access log that has me worried, they still seem to be accessing my account. I've had AVG on my phone for quite some time now and that doesn't pick up anything, tonight I DL'd Lookout and that also came back as a clear scan.
My phone is still stock, would a factory reset fix the issue? I'd question whether or not a reset would get rid of the keylogger/spyware/malware or whatever is creating this problem. What about rooting and flashing a rom? What else could be causing the issue? I'm afraid that if I close the Hotmail account that there would still be something on my phone that's giving others access to my accounts.
Sorry for the book, T.I.A.
Noto_81 said:
I think that my Hotmail and/or S4 has been hacked. Last Monday I received word that a strange email was sent from my account with a link to skin care or something like that, so I changed my PW. On Friday, I received an email from Outlook that says my account has been compromised and I should change my PW, so I did, again. Sunday night, I'm told that another strange email was from my Hotmail account, so I change my PW again, 3rd time within a week. Each PW wasn't overly hard, but always contained both letters and numbers, so not super easy to crack I wouldn't think. So I started to try to track down the source, I removed email accounts from my phone on Monday (I have the stock email app set to check 2 accounts and have yet to have an issue with the second account). I also noticed in the Hotmail access log that my account was being accessed in 2 other states while all this was going on. So, all was going well and today I set up the email app with my Hotmail account info so I could check my email from my phone. Within 2 hours, my account was accessed from out of state again, but as far as I can tell nothing was sent.
I've read that its pretty simple to send out an email using an account that you don't have access too directly, just set up to use as a sent address, nothing shows up in my sent items so that would support this possibility. It's the account access log that has me worried, they still seem to be accessing my account. I've had AVG on my phone for quite some time now and that doesn't pick up anything, tonight I DL'd Lookout and that also came back as a clear scan.
My phone is still stock, would a factory reset fix the issue? I'd question whether or not a reset would get rid of the keylogger/spyware/malware or whatever is creating this problem. What about rooting and flashing a rom? What else could be causing the issue? I'm afraid that if I close the Hotmail account that there would still be something on my phone that's giving others access to my accounts.
Sorry for the book, T.I.A.
Click to expand...
Click to collapse
I'm not familiar with Hotmail, but many email providers allow 2-factor authentication. I would definitely suggest using that if it is available to you.
Check the IP addresses on the accesses from other states - do they match your ISP? Sometimes ISPs give out addresses that show up as different states. If Hotmail doesn't show ISP, you can put the IPs into the search at http://bgp.he.net/ and it should show you the ISP.
It is indeed trivial to send email appearing to be 'from' any account without access/relation at all to the account. Unfortunately spammers often take advantage of that and there's not really anything you can do about it.
I did activate the 2 step authentication.
I did track the IP address and then Googled what came back from the search (Cellco Partnership DBA Verizon Wireless) and it appears that this is tied with VZ and the related towers. It just seems weird that at one point it says its being accessed in Minn and the next time in Colo but I'm in So Dak and haven't traveled far from home since all this started.
Regardless, last night another email was sent with my email being used as the sending address. I've decided to close my Hotmail account because of all the hassle. I'm still looking for some advise on whether or not I need to reset the phone or possibly root and flash my phone in order to get rid of anything that might be stored on my phone. Is it worth worrying about or should I just move on?
Noto_81 said:
I did activate the 2 step authentication.
I did track the IP address and then Googled what came back from the search (Cellco Partnership DBA Verizon Wireless) and it appears that this is tied with VZ and the related towers. It just seems weird that at one point it says its being accessed in Minn and the next time in Colo but I'm in So Dak and haven't traveled far from home since all this started.
Regardless, last night another email was sent with my email being used as the sending address. I've decided to close my Hotmail account because of all the hassle. I'm still looking for some advise on whether or not I need to reset the phone or possibly root and flash my phone in order to get rid of anything that might be stored on my phone. Is it worth worrying about or should I just move on?
Click to expand...
Click to collapse
Can you PM me the full headers of the email that was sent? I should be able to see in them how it's being done -- whether through your actual account, hotmail's servers, or just forging your email as the 'from' address.
You'd have to get them from the person who received it... in gmail it's as simple as clicking the little arrow and then 'Show Original', but the method to show headers will vary by client/provider, should be easy to google though.
About the IPs, it's not unheard of to be assigned IPs from a state or two over. It's obviously not an ideal configuration, no idea why it happens, but it has happened to me several times in the past. But we can't say they were your phone unless you've been keeping track of what external IPs your phone has been getting...
It is a really good sign that they're not some weird server host in russia, etc... though.
It's very common for spammers to forge a sender's email address - they can easily send spam which is "from" you without having any access to your account whatsoever. Some of that spam will get bounced back to you based on the use of your address, not because it was actually sent from your account. The bounced spam should include the headers it was originally sent with, from which one can tell where it really originated.
Are you sure the "out of state" access isn't just legitimate access to the account from your phone? IP addresses are logical, not physical. The geoIP databases which try to map addresses to locations aren't perfect, and your cell carrier may in fact be associating your phone with an IP mapped to a different state.
Related
Anyone get a warning from Gmail (via desktop browser) about suspicious access to their account? I got a message in red this morning about a suspicious IP address accessing my account yesterday. Freaked me out and made me change my password. After some digging around, I traced the IP back to San Fran, and Motorola's name is next to it. I'm a little assured now, but still why was Moto accessing my account?
Anyone else?
I suspect that's from Motoblur. It checks your email for you and then pushes updates to your phone. It's why I haven't added any accounts to blur, and will dump it as soon as I am able.
had the same after creating blurs account..wired at least
Same here. I am going to remove my accounts from blur as well.
MLonon said:
Same here. I am going to remove my accounts from blur as well.
Click to expand...
Click to collapse
Stupid question but how do you do that? It's my first Motorola phone and I have no idea?
Sorry for bumping this old thread, but today I had the same issue, and happened when the phone wasn't connected to the Internet, so it seems a bit strange...
Furthermore, the fact that I have this phone since June 2012 and this is the first time I face to this problem makes me think...
Is there anyone that has experienced this issue and went down into details in order to know exactly why this happens?
I was at a hotel on the weekend. I connected to the room specific wifi, and when I went to a webpage I had to put a password in. When I got back home today, I noticed I had sent viruses to all my contacts through my hotmail email.
Is there anything I should change on my gtab or bank accounts?
At a Minimum
Did you log into Hotmail while you were there?
I would suggest changing the password on your hotmail account at a minimum, and doing the same for your banks would probably be a good idea too.
Sounds like someone at/near the hotel may have used firesheep or a similar application to sniff your traffic. There are other possibilities, but I think that's the most likely.
GoPDemon said:
I was at a hotel on the weekend. I connected to the room specific wifi, and when I went to a webpage I had to put a password in. When I got back home today, I noticed I had sent viruses to all my contacts through my hotmail email.
Is there anything I should change on my gtab or bank accounts?
Click to expand...
Click to collapse
Yeah. I would change all my passwords.
And keep an eye on your credit card statements.
And, don't log in to anything you care about via open wifi. On any device. Frankly, I don't trust Android, or even iOS (or Windows, for that matter) as a platform for doing financial transactions, but then I am both paranoid and nearly always within easy reach of more secure desktop environments...
Failing that, be sure to hand your wallet to the next random person you pass on the street
Hello guys. I got my sgs2 with stock firmware 2.3.3 two weeks ago. I was able to set up every account flawlessly except for my exchange office email. It keeps displaying 'set up could not finish/ Cannot connect to server'. All my entries are correct and my network too is good. I tried connecting on my former device, samsung vibrant, and worked flawlessly. So also on some other devices i tried. I have read in this forum several solutions and inhave tried them all. Connect through wifi , using the exchange account under 'accounts and sync ', using 'edge' only type of connevtivity , i have also updated to stock 2.3.5 and still having the same problem. I dont want to change the email apk as some did and will prefer using the stock email app (not third party app)
Please, does anyone having any idea on getting my exchange account to connect on the sgs2? I need to sync my exchange contacts, mails and calender. Will appreciate every response to solving this problem.
Thanks guys
Sent from my GT-I9100 using XDA App
Please guys, I am still waiting for anyone that has a clue about solving this problem. It will be highly appreciated.
Sent from my GT-I9100 using XDA App
I know you don't want to use a third party app but your problem may be on the administrator side of your account. Try the demo of Touchdown Exchange and see if that works. If it does, then you know it's a samsung problem.
Btw, there is a limit to the number of phones you can add to your email account with exchange. Each time you put on a new rom, it treats this as a new phone. Through owa or outlook, check how many mobile devices are registered to your account.
Setup for Office 365 Exchange Account (Small Business)
I just got my SGS2 today and tried setting up my Office365 Exchange account.
I ran into issues, getting a similar error message to OP.
The solution was:
1st Screen
- on the 1st setup screen, fill in username and password
- choose "Manual Setup"
- when asked what type of account, choose "Exchange Activesync"
2nd Screen
- there are 3 fields: a) Domain:user name b) Password c) Exchange Server
a) format is domain\user name (i.e. whatever.com\[email protected])
b) already filled in
c) normally, server address is m.outlook.com when using Office365. Samsung dares to be different - you need to find your actual server address, not the generic one.
Go to this address to get details for filling in these fields: http://help.outlook.com/en-us/140/dd936215.aspx
Once I accepted the various activation messages, an error message flashed very briefly, but then sync was established and I synced very quickly.
I think the message was: "Cannot open connection with server due to security error", but I can't be sure
I ignored that error message, as sync seems to be working perfectly, with "push" activesync.
This was discussed on the Office 365 forum. Here's the link: http://community.office365.com/en-us/f/160/t/5282.aspx
I realise you may not have Office 365 Exchange, but I'm posting this in case it may be of help in some way.
P.S. Must say, I'm very chuffed that Samsung's native Exchange client supports Tasks and SMS sync, in addition to the standard options. SMS Sync seems faster than it was on HD2...
thanks guys. I really appreciate all the responses. I have tried out the solutions provided . I installed the touchdown app and it worked straight away. my mails, calendar, contacts & talks sync completely.
I also read through the links provided above and really never made any error initially on setting up my exchange account. Though I still followed through the steps/settings for exchange setup and still encountered the problem. one thing I like to clarify is that I am not sure if the server in my office is 'office 365' has being explained on that site. I think we use the exchange 2007. if the exchange server type is the issue, will using one if the email apk posted under themes and apps section work for me if installed? Because, I really will prefer using a stock email app. or is there any other way I can get the stock email app to work without giving me those error messages?
Also, will installing one of the custom roms get it working?
I have 3 email accounts set up on my S3: An Exchange account and an IMAP account, using the default email client; and a gmail account using the gmail app. Frequently the whole IMAP account gets deleted. The exchange and gmail accounts are unaffected. This seems like a major bug. Has anyone else had the same?
The sync frequency for the exchange account also doesn't appear to work properly. I originally had it set for push email between 7:30am and 10pm and manual only outside those times. Sometimes it would still sync emails when it should be set to manual. I've since changed the settings to be check only four hourly during the day but it often (but not always) seems to behave as if still set for push email. Anyone else noticed this?
Frequently the whole IMAP account gets deleted.
Click to expand...
Click to collapse
Do you have a spamfilter installed on your mobile?
It looks like another client may be downloading the email-account through POP3 and not have the option to keep the emails on the server checked.
At least that usually is the reason for emails disappearing when my customers complain about such problems...
The sync frequency for the exchange account also doesn't appear to work properly
Click to expand...
Click to collapse
S3's Exchange looks to be broken. I've seen very high battery drain of the exchange service even if the account was completely disabled, but it would go away as soon as the account was removed.
Your mailserver's policy may require an open data connection at all times (at least I _THINK_ there is such a policy option), mine seems to work fine in pull mode.
(I'm using a modified (added SMTP) Z-Push to provide Push-Email from IMAP-accounts even tough the german carrier (T-Mobile) has blocked mobile Email access)
Thanks for the reply. It's not just the emails that are being deleted, it's the whole account. It disappears from the email program and doesn't show in the accounts and sync page either. I've had to re-enter the account settings twice now. I've seen one report of something similar on another forum.
I understand what you mean about POP but that would only delete the emails not the account. The account doesn't support POP anyway, only IMAP.
It is also happening with me. The third email account I have configurated, which is Gmail, is indeed being deleted after a couple of hours.
Any idea on this guys?
No one facing this same behaviour?
I don't know if this has fixed it, but since I did this my email account has survived longer than before. It's only about a week though so could still go at any minute
In Setttings->Accounts & sync->Samsung Account->Device backup I disabled auto backup (which seemed to be failing any way). I'm not sure if it conflicts with having the google back up enabled as well. Since then my email accounts have survived. Fingers crossed it stays that way
Y'all living with your angry, jealous ex-girlfriends?
Nope. Although she does not know my passwords
cmd512 said:
Y'all living with your angry, jealous ex-girlfriends?
Click to expand...
Click to collapse
---------- Post added at 12:03 PM ---------- Previous post was at 12:01 PM ----------
I've deleted Samsung account and now it seems everything is fine with my third email account (which is Gmail ).
Mates,
The only thing that duly worked was reseting the phone. Now everything is fine and no more deletions of my third email account.
Hello, I am in England,UK. My fone is jacked up big time. I got it on Thursday, and am unable to create the e:mail account on the fone in the apps section. I can create a G:mail account on it which I don't need through the G:mail thing, but am unable to do so on the e:mail icon.My account is yahoo, and am told because it is yahoo, it is complete competition with google, therefore the fone will absolutely not be able to use yahoo on it. Is this true? if so, then I have wasted 500 quid on a paperweight thats too light to weigh down paper.
I am on Vodafone, and I rang them on Sunday morning, and they told me to change the proxy numbers and the port number. The fone is factory standard, was brand new on Thursday, and is on Andoird 404.
Ask Jack to try this first .
http://www.gadgetreactor.com/tag/sgs3
jje
Thanks for the link, however, after trying for the last 15 minutes to try get to work, still no joy. Will installing the new jellybean softwae help when it comes out? It doesn't look like this fone wants to work properly. First Dobby, now this!!
Just use the yahoo app? I used to use yahoo years ago but made the change to Gmail well worth it.
Sent from my GT-I9300 using xda app-developers app
CharleyNokia said:
Hello, I am in England,UK. My fone is jacked up big time. I got it on Thursday, and am unable to create the e:mail account on the fone in the apps section. I can create a G:mail account on it which I don't need through the G:mail thing, but am unable to do so on the e:mail icon.My account is yahoo, and am told because it is yahoo, it is complete competition with google, therefore the fone will absolutely not be able to use yahoo on it. Is this true? if so, then I have wasted 500 quid on a paperweight thats too light to weigh down paper.
I am on Vodafone, and I rang them on Sunday morning, and they told me to change the proxy numbers and the port number. The fone is factory standard, was brand new on Thursday, and is on Andoird 404.
Click to expand...
Click to collapse
The competition with Yahoo has no bearing on whether Yahoo accounts will work. I just set up a Yahoo account there and it is having no problems sending or receiving mail through the email app. What exactly is happening when you try to set up an account?
Use the yahoo app. My wife uses her yahoo account everyday. No problem sending/receiving emails. What happens when u try to set the account???
Hi, ok, when I go to the create an e:mail screen, I fill in the full e:mail adress, and enter the password, the it has the working circle, checking incoming servers for about 20 secs, then comes up with message box saying,' Username and password incorrect'. Thats it.
I HAVE for the time being signed in using the fone's app, but that is a manual receiving system, I don't want to check IF I have mail, the creating the account thing alerts me when I DO get mail right? So I can go straight to it without having to sign in constantly via the fone's app.
It worked fine from the first time I signed in the my Nokia N900, Nokia E7, HTC HD2, but this Samsung won't do it.
I had the same problem and a few other people. Here's how I got my Yahoo to work on my S3. Log in to your Yahoo account on the computer/laptop. Change the password and save. Now do the same on your phone. It worked for me and the other people who had this same problem.
Good luck
If johnw's fix doesn't work, have you tried setting up an account manually? Presuming you used the automatic set up thing.