Spam from myself

Mutant

Hello
In last couple of months ive been receiving spam that makes it looks like im sending to myself demanding i pay bitcoin to some account or they would send videos to all my contacts.
I know these are spam and theres not much to worry about or nothing much i can do.
The things i am wondering about are how is this spammer sending an email to me that has my address in both the to and from fields.
The other thing that worrys me a small bit is and email saying Your password is ***** and the password would be the first half of one or two of my passwords.

Anyone receiving similar emails or can shed some light on this or has my email been hacked.
Thanking You

Wheety

First of all, it's very easy to spoof the 'from' email address. They are running automated software to do this. They have your email on a list and the program is just setting the to and from field to the same address.

The password thing means they probably have some of your password. I would change the password on all sites where you use that email address and password.

I use LastPass and have different passwords on (almost) every site I'm on.

Download and run Malwarebytes before changing your passwords. It should, hopefully pick up a possible keylogger.

https://support.malwarebytes.com/community/consumer

And stick your email in here and see if it has been part of any major breaches.

https://haveibeenpwned.com/

Mutant

Wheety wrote: »

First of all, it's very easy to spoof the 'from' email address. They are running automated software to do this. They have your email on a list and the program is just setting the to and from field to the same address.

The password thing means they probably have some of your password. I would change the password on all sites where you use that email address and password.

I use LastPass and have different passwords on (almost) every site I'm on.

Download and run Malwarebytes before changing your passwords. It should, hopefully pick up a possible keylogger.

https://support.malwarebytes.com/community/consumer

And stick your email in here and see if it has been part of any major breaches.

https://haveibeenpwned.com/

Thanks for the reply and information. I use norton products at the moment but will do that with malwarebytes.
Thanks again

Kavrocks

I get emails with passwords but they go to spam and I never see them. My emails and usernames are on https://haveibeenpwned.com/ but I use LastPass and change my passwords if there is a new breach.

You can set up alerts on have I been pwned incase your email or usernames show up in new breaches which I would recommend also.

The To and From addresses can be set to the same in any script like the PHP below

<?php
$to = 'myemail@example.com';
$subject = 'The subject';
$message = 'Hello, World';
$headers = 'From: ' . $to; // = 'From: myemail@example.com'

mail($to, $subject, $message, $headers); // Sends the email
?>

Wheety

Mutant wrote: »

Thanks for the reply and information. I use norton products at the moment but will do that with malwarebytes.
Thanks again

MalwareBytes should be used alongside your antivirus, not as a replacement. I had a trial of the premium before and while it's a good product, I think the free one is all you need.

But with the free version you will have to run a scan yourself (premium is real time protection). Always click update first and maybe run it every couple of weeks.

Mutant

Wheety wrote: »

MalwareBytes should be used alongside your antivirus, not as a replacement. I had a trial of the premium before and while it's a good product, I think the free one is all you need.

But with the free version you will have to run a scan yourself (premium is real time protection). Always click update first and maybe run it every couple of weeks.

I just did and it worked great thank you

Wheety

Did it find anything?

Mutant

Wheety wrote: »

Did it find anything?

20 possibilities 🀔 so there gone now 😊