Fitbit hacked?

#1

Post by michaelrhansen » Fri, Oct 14, 2016, 5:28 PM UTC

My wife just received numerous spam emails from FitBit. Advise to change password asap. Will try to post image asap.

Re: Fitbit hacked?

#2

Post by michaelrhansen » Fri, Oct 14, 2016, 5:30 PM UTC

http://imgur.com/GXd2sRK

Re: Fitbit hacked?

#3

Post by cjbprime » Fri, Oct 14, 2016, 5:34 PM UTC

How do you know they were from FitBit, rather than from a spammer with their From address set to FitBit?

Re: Fitbit hacked?

#4

Post by michaelrhansen » Fri, Oct 14, 2016, 5:39 PM UTC

cjbprime wrote: post #3

How do you know they were from FitBit, rather than from a spammer with their From address set to FitBit?

good question - i believe the email address was Fitbit but will confirm

Re: Fitbit hacked?

#5

Post by michaelrhansen » Fri, Oct 14, 2016, 6:25 PM UTC

Looks like emails are coming from Fitbit - maybe a system issue.. http://imgur.com/a/K6F2t

Re: Fitbit hacked?

#6

Post by cjbprime » Fri, Oct 14, 2016, 8:40 PM UTC

michaelrhansen wrote: post #4

cjbprime wrote: post #3

How do you know they were from FitBit, rather than from a spammer with their From address set to FitBit?

good question - i believe the email address was Fitbit but will confirm

Ah, sounds like you don't know about from addresses: they are specified by the sender, and not authenticated. A spammer can send email that appears to be from anyone else, until you look at the validated headers (like "Return-path:").