A couple of days ago I noticed an in coming mail that looked very like my address. It got my attention it contained some commentary about how I was doing and addressed me by my first name. The comments closed by asking me to write back to him and said something like "I have something I want you to do for me".
I thought it looked pretty scammy and suspicious so I just deleted it and didn't too much more about it.
Whats happened since is the look alike address has contacted some of the recipients of my outgoing message to an 'rsync ' mailling list. One of those recipients saw something was pretty fishy. He sent me some of the message where the scammer tried to convince him to get some kind of money order for him, posing as me.
I found out a day or so later that somehow this hacker had gotten to my zohomail account and inserted his look alike address into a default for the `Reply-To:' header. So any message I send carried his Reply-To address. and therefore any answers to my questions at rsync list would come to him. I didn't notice the Reply-To: field for a day or two.
When composing on the zohomail server the "Reply-To: " field is shown but it is pretty far to the right of where the writing takes place... and I didn't notice it.
I'm very sorry to bring you this sob tale but I have been trying strenuously to get zoho support to help me close my account right away. So far they have ignored me even though I sent them some of the content from the fishing email involved.
I got them on the phone two days ago, but bigoted or whatever, I had serious trouble undertanding the young fellow who was to help me. He made a mighty effort ad did I, finally resorting to spelling out words I just could not get. Apparently the call did no good since I have not heard from them since.
In fact I'm waiting for a call back as I write.