Hacked Email

Problem

Your email has been hacked or compromised.

Solution

The following are our recommendations for handling compromised email accounts and avoid them in the future.

1. Change password as soon as possible.

   1. Password recommendations

      1. Use a passphrase. A sentence as a password is great, and https://xkcd.com/936/ demonstrates why. Here are the 3 main advantages.

         1. It's easy to make a longer password. We're good at remembering words and phrases.

         2. It's easy to make a more complex password. Just look at punctuation, grammar, and capitalization!

         3. It's easy to make a unique password. Easier to remember means more headspace for more passwords!

      2. Use a password manager. The passphrase recommendation is still important for master passwords, but things like dashlane, logmein, onepassword, etc. are totally amazing and always worth considering. They generate unique, complex, and long passwords for each login, associate them to a site, and save the data for easy and well-organized access for you!

      3. Run anti-malware scans on the computer of the compromised user. Why? It's common to get malware that compromises the most secure of account details. If they can see what is typed on the keyboard, if they have physical access, you're compromised and will continue to get compromised.

      4. Run email addresses attached to your accounts, **especially accounts sharing passwords**, through haveibeenpwned.com to see if/when your passwords may be present in password dumps/mass compromises and change passwords to anything important from around that time, or anything still using that password.

      5. If you ever question the veracity of an email, just open up apps.rackspace.com, export the mail as .zip, and run it through virustotal. Even if virustotal.com doesn't say there's malware, right click on any links and make sure you recognize the website before putting in account details.
         Beyond that, if there's malware please report it to us. We need to keep making our filters better to keep everybody on our platform safe.

      6. In Web mail, please have the end user review the following sections for any changes not made by him/her. All of these will be accessed by going to the MENU option in the upper-right corner.

         1. Update Phone: Menu > Update Phone

         2. Identities: Menu > Settings > Composing Email > Identities

         3. Forwarding: Menu > Settings > Incoming Email > Forwarding

         4. Filtering: Menu > Settings > Incoming Email > Filtering

         5. Spam Settings: Menu > Settings > Spam Settings

         6. Safelist: Menu > Settings > Spam Settings > Safelist

         7. Blacklist: Menu > Settings > Spam Settings > Blacklist

      7. The last recommendation pertains directly to Rackspace Email mailboxes. here's the exchange settings list

         1. General>Manage Add-ins

         2. General>Mobile Devices

         3. Mail>Automatic Processing>Automatic Replies

         4. Mail>Automatic Processing>Inbox and Sweep rules

         5. Mail>Accounts>Block or Allow

         6. Mail>Layout>Message Format

         7. Mail>Layout>Email Signature

         8. Mail>Layout>Link Preview

         9. Calendar>Automatic Processing>Invitations

         10. Calendar>Shared calendars>Calendar Publishing

Related articles