In an earlier post, I wrote about some Chinese fake-storefront scammers who are apparently using hijacked Hotmail accounts to send out spam. We've had a lot of messages from Hotmail users and their friends about this problem, so here's a quick explanation and some tips.
The scammers apparently have a way to get control of other people's Hotmail accounts and use them to send spam. At this point, we don't know whether they use a virus on the user's computer to steal passwords, whether they use phishing techniques to trick people into giving up their passwords, or whether something else is involved.
If you are affected by this problem, this is what you need to do:
- Use an up-to-date virus and spyware checker to scan any computer that you use regularly.
- Change your Hotmail password and security question.
- Check that your Hotmail account isn't set to forward to any other address.
It's very important that you clean your computer of any viruses before you change your password.
To change your Hotmail settings (passwords, security question and email forwards), click on your name in the top right corner of the page and choose 'View Account' from the menu that appears. The section marked 'Password reset information' contains links that let you change your password, security question and alternate email address. If you have problems, the Frequently-Asked Questions on the right side of the page include some helpful tips and explanations.
When choosing your new password, choose one that's easy for you to remember but difficult for other people to guess. You should also make sure that you never enter it on any site except Microsoft's Hotmail or Live.com websites.
There are a number of free and commercial products that will help you remove viruses and spyware from your computer. About.com has some information about computer viruses and anti-virus software, and Microsoft also offers a page of computer security advice. If in doubt, ask a knowledgeable friend or colleague. Once you have installed the software and cleaned your computer, make sure that you keep your virus protection up to date.
Update: Please see our latest post about Hotmail account hijacking for updated information.