Unauthorized emails are sent from my email- subject Hi and nothing else?

by satrap
5 replies
I am having some trouble with my email. My email from my domain. I have been getting this wired emails from people who email me and ask me why I emailed them and only wrote "hi". Apparently somehow I am sending emails to people, who I dont even have their email addresses, with the subject "hi" and nothing in the body of the email. So, I have to email all of them explaining the problem. but, it is so embarrassing, and I dont want to be seen as spamming or something.

On the other hand, I have been receiving emails with same circumferences. Subject "hi" and nothing else. On the bottom of these emails that I receive I see this "This mail is created by Contact Form 7 plugin for WordPress."

I am using the Contact Form 7 plug-in for WordPress on my blog. I am thinking, there might be something wrong with that plug-in or maybe another plug-in is interfering with it. Other than that I have no idea. Anybody knows whats happening?


Other info that might help:
Host= host monster
email program= SquirreMail (although I can also use horde and roundcube)
Most of my plug-ins are the common ones like All in one seo, akismet, sexy bookmarks, google xml sitemap and a few other.

I would appreciate any help. Thank you very much.
#email #emails #subject #unauthorized
  • Profile picture of the author phpbbxpert
    Someone is most likely hijacking the Contact form and using a header injection carbon copy to send mass emails. By someone I mean a script that they are running, like a bot that searches contact forms and looks for a loop hole. The reason for just the Hi in the subject is that their script is probably not grabbing the content field properly.

    Make sure the Contact Form 7 plug-in is upto date, if it is, then I suggest finding another contact form solution before you get blacklisted for spam emails.
    {{ DiscussionBoard.errors[2533965].message }}
  • Profile picture of the author hhunt
    First I would check the log file for suspicious traffic and try to work from there. Changing your password should also help in case it has been compromised.

    If you know a little bit of programming, review the code and see if there's a rouge routine that might be hijacking your contact form details and posting them to some external site. Check for any unknown IP or address.

    If you need further help please let us know.
    Good luck.
    {{ DiscussionBoard.errors[2535272].message }}
  • Profile picture of the author satrap
    Thank you guys for helping out. I am going to take both of your advices and see if I can fix the problem. I will let you guys know how it goes. Thank you very much to both of you.
    Signature
    60 Awesome Ways to Make Money Without a Job
    .................................
    Check out my blog Survey Satrap featuring honest reviews of paid survey sites.
    {{ DiscussionBoard.errors[2551999].message }}
  • Profile picture of the author satrap
    Hey guys, thanks again for the help. Since I am not comfortable editing codes and in general not very technical, I did a search and found and installed another contact from plug-in. I just dont want to be black listed, so I thought it would be best to get rid of it as fast as I can. Thank you guys again.
    Signature
    60 Awesome Ways to Make Money Without a Job
    .................................
    Check out my blog Survey Satrap featuring honest reviews of paid survey sites.
    {{ DiscussionBoard.errors[2552043].message }}
  • Profile picture of the author bugbuguk
    you need to contact your server company, they should be able to put an ip ban on the server / user doing this
    Signature

    Google News Press Releases , PM For Details :)

    {{ DiscussionBoard.errors[2574621].message }}

Trending Topics