toedtoes wrote:
This is what happens when you respond to spam email
Security savvy users know that one should not click links in emails. But instead go to the website mentioned. This to avoid the possibility of allowing malware to be installed.
However, just opening an email can in some cases allow malware into a system. Which could be as simple as a well crafted text message. Both the above mentioned instances typically the result of some unpatched vulnerability in a users system that a hacker attempts to exploit. Which is why one needs to keep their systems/software patched with security updates, and avoid using outdated software that is not supported.
Bottom line, it may make sense to not even open and just delete email from unfamiliar or suspicious sources.
Yet another more scary email exploit, which has been seen in the wild though not very common, is where a hacker exploits an account by simply knowing the email address. This was demonstrated by security consultant Kevin Mitnick, once a most wanted hacker by the FBI, who by using just an email address, and the corresponding hash along with available tools on the Net, was able to extract the email password of an account.
Once gaining access to the email account, a hacker could conceivably contact financial institutions linked with the email to request a lost password change. Change the financial passwords, and gain access to those accounts. Which is why its important to enable two-factor authentication as an extra layer of protection.
Luckily, major email providers are aware of this potential exploit and have taken steps to prevent this scenario.
