Disused email accounts vulnerable to hacking by spammers

Disused email accounts vulnerable to hacking by spammers

Wednesday, 13 March, 2019

A former TalkTalk customer has found her contacts being bombarded with spam from her old TalkTalk email account, despite closing it down eight years ago. To make matters worse, the broadband provider’s customer service team initially refused to delete the email address – because she was no longer a customer.

The ex-customer found herself in a bureaucratic nightmare, after friends contacted her and said they were being bombarded with spam from her old email address. It seems the hackers were able to harvest the contents of her address book once they had accessed her defunct account.

Coming from her old account, the emails looked genuine at first glance. In some cases they even contained a subject line from her previous real emails. It was discovered the fake emails contained a disguised hyperlink to an infected file.

After getting her old account details she found she was able to log back on, which in itself indicated that her password had been taken over by the spammers. But, while she could log on, she could not change the password. To do so she needed to log into another TalkTalk account portal, but, of course, couldn’t because she was no longer a customer.

Instead TalkTalk demanded two separate proofs of her identity before they would even talk to her. This is despite the fact that sending forms of ID to a company you have no formal relationship or contract with, especially to a company where hackers may have attacked, is not recommended.

Gaining access to email accounts is highly prized among spammers and hackers. Sending attachments to a recent email conversation is one of the major means to get around anti-phishing measures.

Of course, advice is to never open unsolicited attachments unless you know the sender and are expecting their email. In this particular case those receiving the email knew the sender but obviously weren’t expecting anything.

In an update, it seems that after the case became public TalkTalk issued a statement saying they were sorry for the inconvenience she experienced, and her old email address has now been removed. A happy ending indeed.

Tim Bamford author picture


Tim is a veteran freelance journalist writing extensively on internet news and cybersecurity.

News What's the story?

Keep up with the latest developments in UK broadband.

Amazon Ring could leave you vulnerable to wifi hackers

The new smart security technology from Amazon could ironically cause major security risks for some!

Amazon Ring could leave you vulnerable to wifi hackersAmazon Ring could leave you vulnerable to wifi hackers Read more

What is TikTok and why are kids obsessed with it?

The app has become an internet cultural revolution, leaving parents baffled.

Read more

Onestream offer cheapest Broadband in UK

Slipping in with an amazing deal just before Black Friday, Onestream narrowly beats all competition!

Read more

Virgin flash sale offers free gifts and deals

Read more

Help Learn with us

Make the most of the internet with our broadband library.

Can you trust ecommerce product reviews?

With online shopping more popular than ever, how much faith can we put in the ubiquitous star-ratings?

Can you trust ecommerce product reviews?Can you trust ecommerce product reviews? Read more

How to get the best value out of Black Friday – every year

Are you prepared for the biggest deal day of the year?

Read more

What can be done in terms of increasing internet access?

Read more