Identical spam email received by all ZOHO email accounts

Identical spam email received by all ZOHO email accounts

I've received email recently posing as being from well-known chainstores in Australia - Woolworths, Coles, Kmart, etc. These messages havearrived in all five of my Zoho accounts - all that changes is therecipient email account.

What concerns me is some of my email addresses have never been publicly shared or used. The only way the people sending these spam messages is to have obtained my email addresses from Zoho somehow, or (unlikely) sending a message to every username/domain name combination on earth...


Has anyone else received messages to accounts that have not been used online?


Is there a way for hackers to obtain a list of email addresses on a server, or monitor inbound/outbound traffic to obtain these email accounts?


I have had some of these accounts spam-free for many years due to cautious online use, and to have them hit all at once points to the lack of security of the mail provider (Zoho)...




Headers below for an example spam message:
Received-SPF: Pass (zoho.com: domain of errors@quicksilverserver.ip09.com designates 204.94.81.174 as permitted sender ) client-ip: 204.94.81.174
Delivered-To: contact [at] dreamscapemedia.com.au
Received: from pip174.smf.ipost.com (pip174.smf.ipost.com [204.94.81.174]) by mx.zohomail.com
with SMTP id 1419204987999589.0354525146519; Sun, 21 Dec 2014 15:36:27 -0800 (PST)
Return-Path: < errors+9z1ze5pc3t6s6t8u6es0801m3kdj9a4e6cd97ig1e1g@quicksilverserver.ip09.com>
DomainKey-Signature: a=rsa-sha1; c=nofws; d=quicksilverserver.ip09.com; h=from:to:subject:date:message-id:list-id:list-post:list-unsubscribe:mime-version:content-type; q=dns; s=dk1; b=sAaY8vCLyuJ/897K5/FuAAB5ftgMHsfKapsFyf+k0ovoSOqNuPKFng/aOJFHnPVnEy9kGAPOOp4g93QeLtudOQW9HJATpyiKSpkYYNiKNX0ZiSsD0YczinOyWgDQqgOH4Vq5IinrHJY6ldC/LpLCFPF2CgPg0AzIl0jxjFC/aRY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=quicksilverserver.ip09.com; h=from:to:subject:date:message-id:list-id:list-post:list-unsubscribe:mime-version:content-type; s=dkim1; bh=JpIpqGze3VcsG0OmQQfRdNnsdck=; b=VovaSbBGYynyI5sEdao7YnLQ0rMcucydm+1Zj4pMhbSAmY10S24sPyayFWdUQZoTO+OFslBLmM5CAqqDOMuimrkoZgaN2/Pdu3vcsHoCgaRzKUlbVcErQ+pEG2Fciel1faE+dpfFDG/oRjUg5jC9AjH0kyA/WLYba4BGGE60QCY=
From: Christopher < admin@quicksilverserver.ip09.com>
To: contact [at] dreamscapemedia.com.au
Subject: Woolworths Vouchers!
Date: Sun, 21 Dec 2014 18:36:26 -0500
Message-Id: < 1419204986.10476.0.939110@quicksilverserver.ip09.com>
Errors-To: errors+9z1ze5pc3t6s6t8u6es0801m3kdj9a4e6cd97ig1e1g@quicksilverserver.ip09.com
List-ID: <gojbd5jm0a7at5m6qr79cdjekp7ct9iedqj4st4m1o69ot66uqr0.quicksilverserver.ip09.com>
List-Post: NO (posting not allowed on this list)
List-Unsubscribe: < http://quicksilverserver.ip09.com/prefs/9z1zkqi1cr9jj8lfacn1mm9adhldk2s3hoc1ifoihro>
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
X-ZohoMail: SS_1 SFPD SFPP UW2468 UB2468 COSF ZMHF-701_2 ZCF-710TTE2 ODL SGR3_1_09124_76
X-ZohoMail-Owner: < 1419204986.10476.0.939110@quicksilverserver.ip09.com>+zmo_0_< errors+9z1ze5pc3t6s6t8u6es0801m3kdj9a4e6cd97ig1e1g@quicksilverserver.ip09.com>
X-ZohoMail-Sender: 204.94.81.174
X-Zoho-Virus-Status: 2


<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>