Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
One of the websites I host for someone had their account automatically suspended this morning due to SMTP spam.
They use Google Apps for Domains, so I reset the passwords of both the website cPanel and their email account on Google. Logged into Google Mail and there was about 1400 bounceback emails from about 1am this morning. 
I've advised them to do a full virus scan on their PC as Google Mail has reported that the account was last logged into at 1:15am this morning so someone obviously had those log in details too, and they also use the email over IMAP on their smartphone.
Apart from monitoring the situation, is there anything else I can do to make sure this doesn't happen again to them?
|
Whittie
Member
Registered: 11th Aug 06
Location: North Wales Drives: BMW, Corsa & Fiat
User status: Offline
|
Give them an auto-gen password.
Their password is currently probably something like dog
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
I set it up so that they have to enter a new password when they type in the temporary one I gave them over the phone a few minutes ago.
But yes, probably is I told them to use a complex password and not use the same one as before
|
Whittie
Member
Registered: 11th Aug 06
Location: North Wales Drives: BMW, Corsa & Fiat
User status: Offline
|
They'll probably use cat mate
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
I used to set up proper complex passwords for people but they complained about them being too hard to remember, so I thought fuck it if they want to use a crap password and increase the chances of being hacked that's their problem not mine - they'll just have to pay me to fix the problem for them
|
Dom
Member
Registered: 13th Sep 03
User status: Offline
|
I would have given them a password rather than letting them decided one, otherwise as Whittie said they'll end up using Bob1 (or something to similar) 
Think you have covered it otherwise, obviously make sure they are using a decent and up-to-date AV and tell them to keep away from the grot sites 
|
Sam
Moderator
Premium Member
Registered: 24th Dec 99
Location: West Midlands
User status: Offline
|
The person in question who's PC/email this is, is a married woman (and a MILF in case you wondered) so I doubt she'd be looking at any dodgy sites at work - although these days you never know...!
|
