And it's not always spoofing. Just this week one of my hosting clients (who i've known 20 years) was suddenly sounding out thousands and thousands of spam emails (for viagra type products no less). The account was suspended until the problem could be determined. The only thing we were able to figure was their password was easy to guess (and directly related to the domain) AND someone had logged in and installed a spam script, which they were using to send these messages. File deleted, passwords changed and the problem is taken care of.
This is prompting a bit of a newsletter reminder to my clients to keep their passwords difficult to guess in order to keep their accounts (and domains) in the clear.
-Diana
|