Ok I'm a little freaked out

Get an email from Amazon in response to the email I sent them complaining about a late package.

Problem is I never sent them an email.

Figured it was spam or phishing but the details in the email including the item and order number were correct.

Now really concerned. Logged into Yahoo to see if I was hacked and the activity log shows no logins from anyone but me.

Things get even stranger when I check my sent folder. There is the email that went to Amazon and it's in bold meaning it had not been opened so no way I could have sent it.

How the f does that happen?

 

Bots....

 

Ambien?

 

Vodka?

 

Russians. (Yeah vodka)

 

Aliens!!!!

 

Soap.

I ordered soap. Paid for it. Box broke along the way. Amazon retracted the order. Never got money back. Started a return. They want the stuff back that they never shipped me.

 

Secret santa?

 

Viagra?

 

Olestra?

 

insomnia?

 

Yahoo really?

 

Seriously.. not drug induced.. happened at 830pm while I was helping my kid with homework

 

Stayed at a Marriott lately?

Sent from my smatrfone

 

You should not look for Yahoo logins from you. Look for logins from unknown locations and devices. If someone compromised your account, they will login as you.

If Yahoo login geolocation looks correct (e.g. logins from cities you expect) than the scenarios for malicious activity are reduced. (If I remember correctly, Yahoo will give you the IP address of all successful logins. Use this to identify the device that could have logged in.) It could be a compromised system on your network or a compromised device you use in familiar geolocation that is either running automated malware or has a remote access torjan (RAT) installed. Since Yahoo keeps accounts logged in, the malware or person on the other side of the RAT would simply need to access your browser to get to Yahoo and send the mail.

First thing I would do is force log off Yahoo for all devices. This is done in the Yahoo security settings. Next, change your password for Yahoo and Amazon. Remember, Amazon just had a breach a few weeks ago.

Good luck.

 

It's a haint.

 

The kid did it....

 

Alexa did it.

 

I’ve been receiving automated phone calls from “my bank” directing me to call “this #” or log into “this website” to review my account. I didn’t use the # or site in the message, called the banks published number. They had no idea what I was talking about. I think it was a phishing expedition.

 

You believe Rossi to be that bored?