Email Hacked

Question

Recently my wife's virgin media (ntlworld.com) email was hacked. Obviously the first thing I did was changed the password. However since then some miscreant has set-up accounts on 2 games platforms using my wife's email address. I myself then accessed these platforms and changed the passwords and set-up 2FA. Then closed the accounts. Next thing I know, the miscreant has managed to somehow intercept the OTP sent by one of the platforms and cancel the "cancellation" and reset the password. I have again changed the password to my wife's email, reset the password on the affected games platform and re-issued the cancel instruction. Can someone explain to me how the hacker is able to intercept the OTP codes sent by the games platform?

goslow · Answer

Have you checked that there is no auto-forward set up on the ntlworld mailbox?

Thestid · Answer

Yes there is, but it is to my day-to-day email address which as far as I can determine has not been compromised

goslow · Answer

Were there any recovery routes set up on the games platforms (secret word, secret question, alternative email address etc.) that would have allowed the scammer back in to the games platform?

Have you gone through VM's process of providing a third party email address to access the ntlworld mailbox?

Thestid · Answer

Last point first; yes, logging onto the VM email can no longer be achieved using the ntlworld address, hence my puzzlement. It almost seems that access is direct to the mail server rather than through the VM logon interface.As far as the recovery routes, they all seem to have a need to 2FA to the email address of the account (unless turned off, which the hacker did after I had switched it on) and I had the codes sent by the platforms. I could find no evidence of secondary email addresses or alternative logon processes.&nbsp;I have changed the mail forwarding to a new email address just in case.

Roger_Gooner · Answer

If a hacker got access to a PC which had unencrypted backup codes, then these codes would be used instead of OTP received.

Forum Discussion

Email Hacked

8 Replies

Related Content

Hacked email account

Old Virginmedia email account hacked. Threatening emails received demanding money in Bitcoin

Email Hacked

Help. My 91yr old Mother’s VM email and account hacked

Blueyonder email address hacked