![\"googleapps[1]\"](\"http:\/\/pariswells.com\/blog\/wp-content\/uploads\/2010\/03\/googleapps1-300x223.jpg\")
Recently a customers computer was compromised and gmail password stolen , to be used to send all contacts an email with the body\u00a0<\/p>Recently a customers computer was compromised and gmail password stolen , to be used to send all contacts an email with the body\u00a0<\/p>
“Please find enclosed document referred to the mail subject.”<\/strong><\/p> Which had virus attached.<\/p> The user’s computer was cleaned , and passwords changed , however incoming email was not working only outgoing.<\/p> Check through the MX records seemed fine, telneting to Google Servers proved the same.<\/p> In the end I spotted it , the attacker had created a filter to delete all incoming messages ( so when he spammed the contact list with the virus , the user would not know about all the NDR’s and emails back from users ).<\/p> Clever I guess but did take a while to find!<\/p>","protected":false},"excerpt":{"rendered":" Recently a customers computer was compromised and gmail password stolen , to be used to send all contacts an email with the body\u00a0“Please find enclosed document referred […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[1317,1318,1314,1316,1315,1313],"class_list":["post-1860","post","type-post","status-publish","format-standard","hentry","category-random","tag-emails-not-arriving","tag-filters","tag-google-apps","tag-mx-records-correct","tag-no-incoming-mail","tag-please-find-enclosed-document-referred-to-the-mail-subject"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t