Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Spammed by my own domain

[joshuayip]

Hi all,

I am not sure if I am in any security threat. I receive spam email sending viruses attachment, using my own domain. Am I in any security threat here?

I wonder where this joker get his idea from.

Joshua

[joshuayip]

Originally Posted by ALL Acquisitions

It is a very simple matter, with a php script, to disguise where the e-mail is truly coming from. For example, this script would come from webhostingtalk:



But that does not mean this user does not have access to your account. If your password is very simple (names, simple number combinations, etc), then a simple Brute Force Attack could open your account to a number of attacks, including taking over your e-mail to apparently send yourself viruses. All though someone with truly malicious intentions (using your server as a dummy) would not make their actions so blatantly apparent by doing this. So you are most likely dealing with a script kiddie playing with toys, which is not something you should necessarily be worried about, but even they can cause enormous problems, if you do not take the proper safeguards to prevent such actions.

Good luck.

Thanks for the fast reply. I never had this before. So I wont really know what is the implication this has on my business . Some people who get this email might think , "whats this? someone spamming their hosting biz aids again... ? " However, this is just my imagination. hehee.. Thanks

Joshua

[StackHost]

It is not a problem at all. If you are looking for a good server hardening team, Rack911.com does a very good job, especially if you are not familiar with any of the processes yourself.

[bitserve]

Doesn't sound like it has anything to do web servers. Many viruses will forge an email address at the recipient's domain in order to con the recipient into believing the email came from a colleague or the organization's IT department.

The only security threat is opening the virus infected attachment, and with vulnerable MUAs and the right type of virus, just opening the email message.

[jpetersen]

Agreed. While receiving email from your own domain could be the result of a web based form you are hosting, it does not necessarily indicate this is what took place. Check your email headers for the whole story.