Email Security Question

[guerrilla]

Is there some way to check and see if my email from my domain account is being "hacked"? Does anyone know of how this could be done?

The reason I ask is that I've got a "Bad Boy" (likes to hang out on hacker boards and make low-key threatening suggestions of breaking into various peoples systems) on a BBS I moderate who's begun making post containing references to two emails I sent privately using my domain account.

I'm afraid I don't even know what to look for or where to look to find out what I need to look for. Any suggestions or reassurances would be appreciated because I'd like to now whether this guy is really scanning my email or one of the people I emailed is forwarding my correspondance to this guy.

Thanks!

[Arthur]

You are referring to an email you sent out, so that will not have been stored on the server.

So where could you get a copy of the email -
If you used IMAP (e.g. QuestMail), then a copy may have been saved in your Sent folder on the server. If the person has your account name + password then he could get to it there. You can go to your CNC and change the password for the account. (this scenario is unlikely)

If you used a mail program on your computer then a copy was probably stored there. If the person got it from there, that would mean your computer has been compromised. Scan your computer for any trojan horse programs and viruses. Make sure you're using a firewall. (this scenario is unlikely)

The recipient of the email will of course get a copy in his/her mailbox. It is most likely that one of the people that have received an email from has forwarded a copy to the person. Or one of recipients' mailboxes has been compromised (the person guessed or 'hacked' one of the mailboxes).

There's not much you can do. If you are sure none of the recipients are forwarding the correspondence, then the only thing you can ask them is to change the passwords of their email accounts.

-Arthur

[guerrilla]

I appreciate the info and will proceed. Since I'm on OS X and using non-Windows stuff across the board (and this guy definitely knows only MS), plus have a firewall in place, I'd be very surprised if he accessed my system. But it's entirely possible he got through to one of the recipients. I'll follow your recommendations.