Your case is really similar to this attack (`How a fraudster got $12 million out of a Canadian university: They just asked for it`): https://news.ycombinator.com/item?id=18186433
Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
21–30 of 88 posts
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#22Email headers of the fake email I received are below. Can anyone identify anything out it? ------- Received: (qmail 30963 invoked by uid 30297); 16 Oct 2018 19:04:18 -0000 Received: from unknown (HELO sg2plibsmtp01-1.prod.sin2.secureserver.net) ([182.50.144.11]) (envelope-sender ) by sg2plsmtp19-01-25.prod.sin2.secureserver.net (qmail-1.03) with SMTP for ; 16 Oct 2018 19:04:18 -0000 Received: from se1-lax1.servconfig…
Do you recognize this domain? > authenticated_id: shahrukh@makamil.com
No. This is some unknown email address.
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#23If I'm reading your story correctly, it matches up with a tactic my clients have been seeing more lately. The scammer has already accessed your account because you fell for a phishing scam, typed your email credentials into a fake login site for a fake Office 365 or Dropbox page or something. Now the scammers are watching your email closely waiting for the opportunity to do this. Waiting for you to send an invoice to…
> The scammer has already accessed your account because you fell for a phishing scam > It's not your fault that they paid the wrong person. How is this not the OP's fault? It's absolutely their fault - the fault that lead to their email being compromised
I stated in the next paragraph that the situation could just as easily be reversed. We do not have any way to know in this situation whose mailbox was accessed, the OP, or their client.
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#24Email headers of the fake email I received are below. Can anyone identify anything out it? ------- Received: (qmail 30963 invoked by uid 30297); 16 Oct 2018 19:04:18 -0000 Received: from unknown (HELO sg2plibsmtp01-1.prod.sin2.secureserver.net) ([182.50.144.11]) (envelope-sender ) by sg2plsmtp19-01-25.prod.sin2.secureserver.net (qmail-1.03) with SMTP for ; 16 Oct 2018 19:04:18 -0000 Received: from se1-lax1.servconfig…
Looks like it pretty transparently sends all replies to "dr.com". Seems like something our email client should warn us about explicitly, instead of just showing "Reply To: Kyle".
Can we find out something from it?
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#25Earlier quoted context omitted.
Looks like it pretty transparently sends all replies to "dr.com". Seems like something our email client should warn us about explicitly, instead of just showing "Reply To: Kyle".
Can we find out something from it?
I think rnotaro solved the whole mystery: https://news.ycombinator.com/item?id=18310631
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#26here in the US, we have the financial fraud kill chain for transfers greater than 50,000 dollars. Other countries have used it as well. you may wish to contact the CSIS for methods they use to short-circuit these transactions.
https://rmacounts.com/uncategorized/financial-fraud-kill-cha...
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#27This is fairly common fraud in the UK. See this for background:
https://www.theguardian.com/money/2018/oct/18/banks-to-check...
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#28Earlier quoted context omitted.
> The scammer has already accessed your account because you fell for a phishing scam > It's not your fault that they paid the wrong person. How is this not the OP's fault? It's absolutely their fault - the fault that lead to their email being compromised
I stated in the next paragraph that the situation could just as easily be reversed. We do not have any way to know in this situation whose mailbox was accessed, the OP, or their client.
Did you edit it in? Either that paragraph was not there when I replied or I'm losing my ability to read
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#29Earlier quoted context omitted.
> The scammer has already accessed your account because you fell for a phishing scam > It's not your fault that they paid the wrong person. How is this not the OP's fault? It's absolutely their fault - the fault that lead to their email being compromised
I stated in the next paragraph that the situation could just as easily be reversed. We do not have any way to know in this situation whose mailbox was accessed, the OP, or their client.
Seems more likely it was the client. If the OP was hacked, the thief could have sent a completely legit email with correct headers and etc.
Re: Ask HN: Lost $10k as my email was hacked. Any ways to recover it?
#30I'm surprised I'm the first person to point this out, but you have not lost any money, your client has. You sent the goods to the client, and they have yet to remit the payment to you. So they still owe you the money and you should insist they pay it. Granted, they're not going to like that, but the reality is they sent payment due to you to some other person. That's something they did not something you did. They may…
this is an issue in real estate transactions as well, where a client or law firm executed fraudulent wire instructions received via spoofed email.
see last paragraph: https://themortgagereports.com/39665/cash-to-close-what-is-i...