Yesterday I discovered that my email address had been used to send a link to everyone on my address list even going back some years and also to lots of unidentifiable recipients. I have a full Kaspersky security programme installed and I was not allowed to open this link by Kaspersky so my computer is not affected but some of the recipients who had not got antiviris clicked on the link. How can they tell if they have been hijacked?
I figure once they have your directory they can spoof you anyway. But I agree, sure, that is a good general precaution against folk getting into your account.
Just because someone has got into your email it does not mean your computer has been hacked. I can log on to my email system anywhere in the world, so someone could do the same with yours (if for example they have your email password, or guessed it).
Secondly, not all PC security problems are a virus, and it sound like this is not a virus. So if your friends install JUST a free anti virus program it will probably run clean.
The only reason your Kaspersky would not let you open the link is because you have the full security product, but if someone ONLY had a free anti virus product it would probably still let them click on a dodgy link.
I am not sure how strict you are with passwords but you should NEVER use the same password for your email system as you do for logging on to web sites.
If you register with a web site giving your email address and using the same password as you do for your email system you are in effect "giving away" your email / password combination every time you logon to that web site.
This could be stolen and then be used to logon to your email system and do all sorts of things.
ONLY use your email password for your email system.
if those Avs were any good they would have stopped it in first place-and anyway they never fix problem even on rare occasions when they find it.
A email account linked to your mobile is safest bet