I know how they did it (I think) It was pretty simple really. They 
didn't even need to "hack". They won't do it again and I will start 
the process of tracking them down. Thanks for the feedback.

:((

John

On 1 Aug 2002 at 15:31, Kevin Bilbee wrote:

> I would start here and make a complaint.
> 
> http://www1.ifccfbi.gov/index.asp
> 
> This is the FBI stie for these kind of issues.
> 
> Kevin Bilbee
> Network Administrator
> [EMAIL PROTECTED]
> _____________________________________
> Changing the way industry works.
> 
> 
> 
> ----- Original Message -----
> From: "Mark Kahn" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, August 01, 2002 2:44 PM
> Subject: Re: [IMail Forum] Help? Might have been hacked or something.
> 
> 
> > if someone hacked your system and all they're asking for is the CVC # then
> > you're already screwed....
> >
> > -Mark
> >
> > ----- Original Message -----
> > From: <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Thursday, August 01, 2002 5:39 PM
> > Subject: [IMail Forum] Help? Might have been hacked or something.
> >
> >
> > >
> > > I use imail server but I don't think this problem is related:
> > >
> > > This is the best list I know of to ask this question.
> > > Let me set this up first then refer to the following text.
> > >
> > > A customer purchased an item from our online store www.magicstore.com
> > > We received the order and everything was great. Then, today this
> > > customer sends me this following email and asks why we have a yahoo
> > > account. We don't have a yahoo account and we did not send him this
> > > email. Does anyone know of this scam and how it was accomplished?
> > >
> > > Return-Path: <[EMAIL PROTECTED]>
> > > Received: from  rly-ye01.mx.aol.com (rly-ye01.mail.aol.com
> > > [172.18.151.198]) by air-ye01.mail.aol.com (v87.18) with ESMTP id
> > > MAILINYE12-0801141211; Thu, 01 Aug 2002 14:12:11 -0400
> > > Received: from  web13003.mail.yahoo.com (web13003.mail.yahoo.com
> > > [216.136.174.13]) by rly-ye01.mx.aol.com (v87.18) with ESMTP id
> > > MAILRELAYINYE17-0801141207; Thu, 01 Aug 2002 14:12:07 -0400
> > > Message-ID: <[EMAIL PROTECTED]>
> > > Received: from [202.150.80.58] by web13003.mail.yahoo.com via HTTP;
> > > Thu, 01 Aug 2002 11:12:06 PDT
> > > Date: Thu, 1 Aug 2002 11:12:06 -0700 (PDT)
> > > From: "The Magic Store.com" <[EMAIL PROTECTED]>
> > > Subject: The Magic Store Order Number 50
> > > To: [EMAIL PROTECTED]
> > > MIME-Version: 1.0
> > > Content-Type: multipart/alternative; boundary="0-1958864576-
> > > 1028225526=:56749"
> > >
> > >
> > >
> > > --0-1958864576-1028225526=:56749
> > > Content-Type: text/plain; charset=us-ascii
> > >
> > >
> > > Hello,
> > >
> > > Thank you for your recent order. As you may already know, over the
> > > last few years, the number of fraudulent transactions occurring over
> > > the Internet has been on the rise.  Because of this, our credit card
> > > processing bank has requested us to take certain measures to prevent
> > > such fraud from occurring.
> > >
> > > In order to fulfill this request, The Magic Store is required to
> > > check the authenticity of your order.  To complete your order, please
> > > provide us with :
> > >
> > > - CVV2 or CVC ( 3 last digits number on back of card for Visa and
> > > Mastercard)
> > > - Social Security Number
> > > - Date of Birth
> > >
> > > in order to process your credit card and complete the order.  If this
> > > information is not received, your order will be cancelled.
> > >
> > > We apologize for any inconvenience caused.  We hope that you comply
> > > with our request so your order can be completed.
> > > And please reply to this email ([EMAIL PROTECTED])
> > >
> > > Thank you,
> > >
> > >
> > > The Magic Store
> > > "the best magic on the web"
> > >
> > >
> > > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > > to be removed from this list.
> > >
> > > An Archive of this list is available at:
> > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> > >
> > > Please visit the Knowledge Base for answers to frequently asked
> > > questions:  http://www.ipswitch.com/support/IMail/
> > >
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
> > Please visit the Knowledge Base for answers to frequently asked
> > questions:  http://www.ipswitch.com/support/IMail/
> >
> 
> 
> Please visit http://www.ipswitch.com/support/mailing-lists.html 
> to be removed from this list.
> 
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> 
> Please visit the Knowledge Base for answers to frequently asked
> questions:  http://www.ipswitch.com/support/IMail/
> 



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to