Contributor II
•
105 Messages
COX EMAIL HACKED ONCE AGAIN
My Amazon account was hacked again through my Cox email. This is the 4th time it has happened over the past few years. I have 2 factor authentication set up with Amazon but they bypass that & click forgot password enabling them to get in through my Cox email account and then they change the password. I have changed email accounts & passwords numerous times to no avail. Looks like it time to use a different mail server since there's no security with Cox anymore.
OpenBSD
Contributor II
•
97 Messages
6 years ago
Seems to me that you have a computer or computers that are compromised at home with either a virus, trojan or malware. Hackers have to gain access to your Cox email account by obtaining your password. You probably clicked on a link or an attachment you shouldn't have and infected a computer on your network at some point or downloaded something that was infected. Also if you plugin a flash drive into your computer that drive may have something installed that is infected. One you attach it to a computer it jumps on and spreads. This is a reoccurring problem it's most definitely a computer or device connected to your network that is infected. Change your network password as well and make sure anything wireless is using WPA2 not WEP or WPA as both of these have been defeated. Also use a virus scanner (Avast Free Version) and a malware program (Malwarebytes program) to remove the infection(s). I truly believe in your case this is a problem from your end.
Final note. Make sure your passwords are not simple and also different for each webpage etc that you login to. Every password you create should be different and difficult. Example: Ne(w)*Pa_ss[@]H*0*m*E#^𖁢 .Also you can use a the free password manager KeyPass to store your passwords.
1
0
Bruce
Honored Contributor III
•
5.7K Messages
6 years ago
This doesn't sound right. If you've changed your email account numerous times on Amazon, what are the odds somebody can navigate to those pages (Cox, Yahoo, Gmail, etc)...on their browser, mind you...and crack those passwords? I suppose they could access all accounts if you're using the same email address and/or phone number as your recovery methods but if you've changed that password as well, the odds are still astronomical.
Passwords aside, if you're using the Amazon Two-Step Verification, those codes are either locally generated (app) or locally accessible (SMS). Meaning, nobody can see those codes unless they have access to your "primary mobile device." If they don't have access to your primary device, they'd need access to your mandatory back-up device to either see or hear your unique security codes.
It doesn't sound like somebody has access to your Cox account, but somebody has access to your device(s). As BSD noted, something or someone has either infected your network or has access to your devices.
However, if you're using the Amazon Alternate Sign-In for Two-Step Verification, this could be causing your mystery. What is your first suspicion somebody has changed your password on Amazon; is it an error message after submitting your password? If so and you're using the Alternate verification, that's normal because your password will change every time.
Alternate Sign In for Two-Step Verification
[Step] 4. Add the security code to the end of your account password on the device or app you are attempting to register and submit again. For example, if your password is "abcdef" and the security code you receive is "12345", then enter "abcdef12345" in the password field. You will then be signed into your Amazon account.
Reference: https://www.amazon.com/gp/help/customer/display.html?nodeId=201962400
If you're using the normal 2-step method, you can skip the security code verification by checking the option for Do Not Require Codes on This Browser. This option needs cookies but if you're clearing cookies, you could be suspicious because Amazon will force you to re-verify again.
If you're not opting to bypass codes or not clearing cookies, you'll need to review your account in Amazon for any unknown "trusted" access and then either untrust, deverify, deauthorize, deregister those devices. If it keeps reappearing, you'll need to contact Amazon to investigate.
You didn't mention if the hacker is actually ordering stuff on Amazon. Are they? If so, where are they sending the packages?
12
0
peggy8080
Contributor
•
80 Messages
6 years ago
My son has been hacked three times since December. Amazon, Lyft, Uber, all compromised and his debit card. Plus people opened accounts in his name and sent emails using his return email address. They were also able to simply go in and select forward all emails to their own account, (It was a gmail account) without any verification or authorization from me. It's insane how easily Cox gets hacked
2
0
Eric_Underwood
New Contributor
•
1 Message
6 years ago
My Amazon and Facebook were all hacked ...Amazon once and FB 5 times in last few days. Traced back to cox email.
1