Hundreds of Draft emails appearing.

[ICF]

We have two emails with sky and both are getting hundreds of draft emails appearing in our draft emails folder.

I have changed both passwords multiple times and have 2 factor authentication turned on.

Virus scans have been carried out using three different scanners and nothing has been found.

I opened a complaint with Sky and had a phone call and they talked me throught all the measures he could think to check in the settings.

He helped me set up a filter but nothing has changed one of my email address this morning has 2473 draft emails.

How can I stop this

[caesarome]

@ICF 

Are these drafts emails blank or actual duplicate emails ?

[Mark39]

@ICF it sounds as though someone still has access to your account, I'm afraid, and it's being used to generate and distribute spam. I can only suggest you go back to Sky and tell them that your account still appesrs to be compromised despite you changing your password and setting up 2FA. Ask them what else they can do to kick out someone who already has access.

[ICF]

They are not blank emails but have content and they are from loads of different email addresses that have strange characters in them.

[caesarome]

It does sound like someone has had access to your account, does anything show in the Sent folder ?

A couple of other things to check:

Go to Settings (the screw icon on the right hand side) > More Settings > Filters and remove anything that you did not setup.

Then go to Settings > More Settings > Mailboxes > Your email address > Reply-to address

And again remove anything here that you did not setup.

[ICF]

I have set up a filter as requested by sky via a phone call.

The only thing in reply to address is my email address.

[jayach]

---

@ICF wrote:

I have changed both passwords multiple times and have 2 factor authentication turned on.

---

Did you have 2FA on before you started getting the draft messages, or did you turn it on in an attempt to stop the drafts?

[ICF]

I not sure is there any way of finding out when 2fa was turned on?

[jayach]

---

@ICF wrote:

I not sure is there any way of finding out when 2fa was turned on?

---

Not that I know of.

[ICF]

So if I did turn on 2FA after the draft emails started what can be done to stop it?

[caesarome]

Do you know when these draft emails started to appear, are they dated today for example ?

[ICF]

They started around the 20th April ish.

I  have been deleting them but in the last 3 days we have got 2564  & 361 in the draft folders.

Yes they are dated.

[jayach]

---

@ICF wrote:

So if I did turn on2FAA after the draft emails started what can be done to stop it?

---

You could ask Sky if they can rescind/revoke any generated passwords for your account(s), as I believe that is possibly how someone may still have access to your account(s).

At one time we could administer our own generated passwords, but Sky removed that ability as they said it was a security risk.

Unfortunately I think you may have difficulty finding anyone at Sky who will know what you are talking about.

[ICF]

I'm not only person this is happening to there is another post headed "Sky email account compromised"