One of my friend has an internet account with AOL and he has an email account and has been using from many years.
His email address is email@example.com
Recently I have been told that somehow email spoofing has happened. All the contacts in his mail have received an email from firstname.lastname@example.org with an attachment and his address to make it more genuine and even I have received an email as well.
When click download the attachment it is going to a one drive saying please click here. When I click there, it goes and asks to log in with yahoo, Gmail or 0365 accounts.
I was told that auser has reset his password on his email account and still able to access his email account.
Please let me know if the hacker has control over auser mail box now. Will it be the best way to send an email to all contacts in his email that his account has been hacked and to ignore the email that has been sent with pdf attachment comes from email@example.com.
Will it be best to suggest him to open a new Gmail account and if so how to inform all his contacts that his email address has been changed? To Gmail.
Any suggestion and help will be great.