电子邮件不是真的由我发送在我的“发送”文件夹中吗？

Question

我有一个outlook帐户(是hotmail)。

我在发送的文件夹中看到了一些可疑的电子邮件，以便在Thunderbird客户端和Outlook web客户端(我没有发送这些邮件)中打开。

我已经更改了我的密码，担心它可能被泄露了；但是，在检查了源之后，我发现我的地址从未出现过:发件人实际上不是我。此外，也没有"To:“

这让我想，也许帐户没有被破坏，但我怎么会看到电子邮件在发送的文件夹？

更新:虽然在一种情况下没有" To :"，客户端在To列中显示“不知道”，而且我的地址从未出现在邮件源中，但在另一种情况下，我的地址出现在"To:“(而不是在”From：“中)。我想说的是，如果电子邮件在收件箱文件夹中，那么另一种情况看起来就像常规的欺骗，但它是在发送的

我包括电子邮件来源(outlook网站似乎没有一个选项，只复制标题)。我将ip地址更改为没有意义的字符，如xx.xxx.xx.xx，替换了恶意链接和邮件地址。我的地址和我的任何联系人的地址似乎都有关系。我可能忘了一些东西，请随意编辑，如果需要的话，请询问更多的细节。

Received: from VE1EUR02HT166.eop-EUR02.prod.protection.outlook.com
 (ffff:ffff:fff::ff) by AM4PR0401MB1970.eurprd04.prod.outlook.com with HTTPS
 via AM3PR04CA0148.EURPRD04.PROD.OUTLOOK.COM; Tue, 5 Dec 2017 16:25:07 +0000
Received: from VE1EUR02FT031.eop-EUR02.prod.protection.outlook.com
 (xx.xxx.xx.xx) by VE1EUR02HT166.eop-EUR02.prod.protection.outlook.com
 (yy.yyy.yy.yyy) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id zz.zz.zzz.z; Tue, 5 Dec
 2017 16:25:07 +0000
Authentication-Results: spf=none (sender IP is kk.kk.k.kkk) smtp.helo=;
 hotmail.com; dkim=pass (signature was verified)
 header.d=oo.ATTACKER.NET;hotmail.com; dmarc=permerror action=none
 header.from=oo.ATTACKER.NET;
Received-SPF: None (protection.outlook.com:  does not designate permitted
 sender hosts)
Received: from SNT004-MC5F5.hotmail.com (hh.hhh.hh.hh) by
 VE1EUR02FT031.mail.protection.outlook.com (jj.jjj.jj.jjj) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.20.282.5 via Frontend Transport; Tue, 5 Dec 2017 16:25:06 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:255C39763F036EA23876BAB41428C4FF25DFCEDF36BCA46234B50E8284D7EA26;UpperCasedChecksum:07DB12FEFEE63D3A0397067AECD2CCE92B37535297A742DC2CBAC5E1A3F32423;SizeAsReceived:1422;Count:15
Received: from oo.ATTACKER.NET ([kk.kk.k.kkk]) by SNT004-MC5F5.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
     Tue, 5 Dec 2017 08:25:05 -0800
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=selector1; d=oo.movingright.net;
 h=From:Sender:List-Unsubscribe:Subject:Content-Type:Reply-To; i=noreply@oo.ATTACKER.NET;
 bh=gxYz3JpgRC3azGshKXDTANqNEhw=;
 b=1ciZCIO2c4qmrODX8SGMiTuGiS2luC5RKM47rWBLQUybeNQgnFjMuONYKnXhQOPTNQP+SzLsieTM
   hlYByyHUVnN5M1xIe4lVkh8ZlDYwM1tHxCZy7m0YenYRY+4YlPSKDYnjipdTA5F2bC+rJ39pCWwp
   q/3t2Wx7un+6GX+btcg=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=selector1; d=oo.movingright.net;
 b=stTfJpnCQ75QjWEEG63JZ9XcPnXW6zsghQgf2LYTgo19PBNoeJ6efXiP2QZzEbwZFaS7B2tOLY8x
   B++5EP1ewy8zbXldZ53IBCRSl6LOEcqXeRsORkgy+BInb7bHy52yFdLBOjtZb21WVPvgC9TDz98p
   IjFh3DjV57fuqVDoH2c=;
From: â¡â¡ Sarah â¡â¡ <qvc@ATTACKER.NET>
Sender: " yh" <noreply@ATTACKER.NET>
List-Unsubscribe: <8ZVtjLfkbt85tdeRBs@tac3.betaparkarc.com>
Subject: â¡â¤ Can't wait anymore ... See my nude pics and let's meet â¤â¡
Content-Type: multipart/alternative;
 boundary="----=_NextPart_6B34F3F8_4354_464B_B214_CE288821B8D1"
BCC:
Reply-To: <contact@ATTACKER.NET>
Return-Path: <>
Message-ID: <SNT004-MC5F5Gr0ePGO003ebae1@SNT004-MC5F5.hotmail.com>
X-OriginalArrivalTime: 05 Dec 2017 16:25:05.0149 (UTC) FILETIME=[9BBA42D0:01D36DE5]
Date: Tue, 5 Dec 2017 08:25:05 -0800
X-IncomingHeaderCount: 15
X-MS-Exchange-Organization-Network-Message-Id: b28d5a5a-a945-46a9-cf2f-08d53bfcbf47
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sending-ip: kk.kk.k.kkk
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is kk.kk.k.kkk)
 smtp.helo=oo.movingright.net; dkim=pass header.d=oo.ATTACKER.NET;
 x-hmca=pass header.id=noreply@ATTACKER.NET
CMM-X-SID-PRA: noreply@ATTACKER.NET
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Delivery: Vj0xLjE7RD0yO0dEPTI7U0NMPTQ=
CMM-X-Message-Info: 3c21WZ1hAlvD6z4W+Uwvl9ImsHEUa/TV22P+NgFf/vRX9nK3L2uwOHntIsd8XhO4MbD/28XyRlUbWcA5rYswXa+72BTBwB5Sjk+MpOUeyPiAEw/KxFOjtzAqRDMnx/llO2pTeGfmjbRpokFCOA+AJ0EO+i1WEUDFXkKB2G4i4OvYAYxvsh7k/g==
X-MS-UserLastLogonTime: 12/5/2017 3:11:17 PM
X-Microsoft-Exchange-Diagnostics: 1;VE1EUR02FT031;1:kb26mkc2Gur4wkI3JkriHM1wTddL9iWWcHF8PPFz5TcFeFV6caw5/jYRkE6/8tct2iUEH2xxCvRz535hWmL6hwGjt6VSnp1kCzmmqB0JsktK2UGIE8duDKAnu4QUQF2j
X-MS-Exchange-Organization-AuthSource: VE1EUR02FT031.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: b28d5a5a-a945-46a9-cf2f-08d53bfcbf47
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(5001025)(4604075)(4605076)(8291501071);SRVR:VE1EUR02HT166;
X-Microsoft-Exchange-Diagnostics: 1;VE1EUR02HT166;3:4UNbiEkNL3mQWkzT67Va8hemwyLjtytaRUijT0qm/aoHOBYOXTQrCKkvtrg9rGotlmFLQ5QJFldCX9rn8dO5y+pxFceWJG3xxUSeYZIgMoCJUEH0I1uB5+X9P6bpHqFWzMAc3HJ++RJFivVDYJi7/193o6PA0uA9rCOt9s5uwnxO7NIvX/ZxMRqJeeeuSZcPwrDVzoJSlf7Pt1tMg5G/JBXr0X8uEirCN91QzB8TxVZCLuHaVfzVTWhTjDsFIPRM5+6euyaRYNUHpSjq2OwS5QP0GCT+4mp51afJzsUD+DJbH0+Rn44Ech1ZdIiKhAqZ;25:qcljjPzjH11Lj+HscQXGwwqNnt108wu/IHYd9ab632NZMC6tpH3GBYE5Hs1jg93yzuhJSl9Jf3Z0+s/vfqIYJmrF8/d6MSqP6Gatornju3nnIJZGg6tuQoYyjGFLDZUpjO0oL0nnC4Hs9Md85wYi8ab9J0Xf0GEZzl9ML1iNVOMxm1fGPJlE1Q6O2VMaf9/d/LoNMmf8o/7CHFtB/BjBimjpMhMTu2vuVtVk+QNYVPWwywcRCFNqsPTj7T71Rk0WNM8NgDEf+8dLt08P1AEemq8QUFwaH0rGr+xB7W7arJGF4Yy6Bh/8B36/Nz3DRsD7mI5/bIap28U5Zo0sG5pIMw==;31:uTCLahoMZ9sdLlG7MIxV2lDbtQeE9LENR88NYwRnQByI3+8yXyBPFS7sffHycpyPjSYTzLbn88/KCR2K0VSmZqlmvR9kGlj/qQcEaw6DqXQhbEm/vBmvmepG7gGbKmngRounJ5zBmXX+bcWYJwA9QnEF/rSJxsgNYdVscGdkPGntiTOlzQAD4vO0IPNzEDd9htBKPfam6uGqbuqReoZkkutaShrfIkw7n90YTCgxWEc=
X-MS-TrafficTypeDiagnostic: VE1EUR02HT166:
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(444000031);SRVR:VE1EUR02HT166;BCL:0;PCL:0;RULEID:(100000803101)(100110400095);SRVR:VE1EUR02HT166;
X-Microsoft-Exchange-Diagnostics: 1;VE1EUR02HT166;4:hDH6XB0xIALryjgDjwIOx2Mgbqxvg++40e05pYvaOGpUzJDLGfF2jNUvGo50BbVQj/1sZYoMuDB70naRENULw3CQOzJ7+V3OfranNp1mMKWg4XsTpNjQLO009/Bhv0/XutVJ0w+Y3ybKYgTvNE+g8d6kuCPPRv8tqwqfsIHf+5qYk7+AifrAQxFY62wFqj3mbsjCACwLJZ+8GRMDlWbmGLJCm6XRPniIvbrgFh//+N3OA4hJx2dbhIFeiUs8ZGiOOTo/2666Rier5D9be3RtRA==;23:fA6EZEu66lYNTqqQcD87MThbCfjplzYIdAynpuO9FmKhoqlHSEN3S73/hcxVRPz5I3w4058XT/daNKW0LsggBSogz5hykYGQnR8GBiSPnJZPrRAVaKQi6+SHXKiXmqB8mq9JkbH7xh80M6RUjlJYzEHXjxBQv3y/Xfnw/I7efy/D24MA1yG5uyxutDcypQ5XxczMDRF54CwoPzC3BnyUEA==;6:J2gFGwtvjTE+hWQZXPuZ4jAMV6++ojIqltBRPELV3zRSMKpfCY9zlcUxofex6By9d5MEZ6VhvHQoLS4IFAEo3apmbdJs0ljp3kPK7Aps/7TcPbbMRFfUQWSAL8+FG/hoWgyRIFm/LVBSXp0hsJy/bVn1NJhEbryNlJy2agXuHRHkF5OkEPE7nGnt0yH+Tzw1MfVINlS2/oUcYAFAVTR/Gbi5Ux3D4/7obnxo8oTmoiusfww65fRyeIlT/P4VWsTUuCKwHGoFxrgX2h8MQD4HUr/7rS+ZvP5JJtDzG3l51a0X3bDYbdsjrZM5es8TQhoI3AJPpTRsUbgzUbEmNCiRuTpDH4rlb6HE33bwCVcd4sg=
X-Forefront-Antispam-Report: SFV:NSPM;SFS:(98900018);DIR:INB;SFP:;SCL:1;SRVR:VE1EUR02HT166;H:SNT004-MC5F5.hotmail.com;FPR:;SPF:None;LANG:;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Exchange-Diagnostics: 1;VE1EUR02HT166;5:nzTosku0e8yI5Od9hGVFDDpSDTaJjG8QrHpcUlBQ0pXoq6Y4R1LLBguzSJQ7DzonSL/7gFit2S8fnLJ5eHoqimUIKt97iu8tT+unYfE0+gk/odfRpO/B10yFS/I0I91ByhRuSUCsfB49iNdcILvT5Z5UjAhZf/375TIBF0rXt8A=;24:tmqDK7FyJfylF73xuv0hmvZ/d8CXBnwO3VR1OV30HXRz0ZKBL4qDnUYeYJ/kuVXPLTHe1uJpb6Fnoz0W3ozuqdn9osrQuAeu/CuJzPoG1do=;7:2laKC5VUl7zA1zWcpTVr93tYaLmh+stpopd5xb0jvca1ZN1PqNQyG7/GKMgbNeQXIT6EEWQU5jj9xS1LQdp+6Pp63aH6NkpHaT0Bf720xps+RtmUQbdxGkqP8ynAz+TekpX+4BEPKvxBjIcVbtIQbcdwjtsNWoXh4MqvldTy32TUlhOlDXm5ApuPHYxCDfib+FLNe01akYFzqt/Gda7O0u+xPo2KhT8UuLTmvhPPist+/rre8vdWRmc9ohHzBSQb
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Dec 2017 16:25:06.0213
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b28d5a5a-a945-46a9-cf2f-08d53bfcbf47
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT166
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.3796011
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0282.012
Importance: high
X-Priority: 1
X-Microsoft-Exchange-Diagnostics:
    1;AM4PR0401MB1970;27:OEPydiXdg1o82HkMUTG0XYX75zuvBxunKAUxDkItlxqYk+4MsCz14PBBHKu1DCh0Ai5orrSvfUSC2bbODcdo49227dYXiBpwoeSh2zGbVUhL5vpEhSm9Gm00Wc6L43Za
X-Microsoft-Antispam-Mailbox-Delivery:
    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SPF:oo%2emovingright%2enet;WIMS-DKIM:oo%2emovingright%2enet;WIMS-822:qvc%40oo%2emovingright%2enet;WIMS-PRA:noreply%40oo%2emovingright%2enet;WIMS-AUTH:PASS;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(1002268)(4900095)(4921089)(3120004)(4950112)(4990090)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
X-Microsoft-Antispam-Message-Info:
    ZdW969Ez/4mHyEZtbSq5HOPAuVUD85rjbP8oC86qtJF/ZIJDSGmjQGwa4BVuxwWk+8aiKF2HYfg3cyTFIU79jY+Hnxc1VxRPT6QqeVm5CjLPzaYLD45M89dl8s7kQEMsD3LfzTI1puwVZjPfff2WWHX1aEbg/PyktaAGKCU5sWKVvl754LzJPh/cDkiQ8b5TNPrDZBfDG0nYuhUvylTq2Y6cXJ0klQGtKwD6bsLTrqJyF6OMsZlUSsrHriIY7VeAlHWruIEuKJyFBbbTR6Ue4/PeQ9QXhCmsGcK2QN+0MI2KNco4MTsBvXIB1DJOuSM/
MIME-Version: 1.0

------=_NextPart_6B34F3F8_4354_464B_B214_CE288821B8D1
Content-Type: multipart/alternative;
 boundary="----=_NextPart_571E1FD8_86E7_4BD2_829A_B257F132850D"
X-Microsoft-Exchange-Diagnostics:
    1;AM4PR0401MB1970;27:OEPydiXdg1o82HkMUTG0XYX75zuvBxunKAUxDkItlxqYk+4MsCz14PBBHKu1DCh0Ai5orrSvfUSC2bbODcdo49227dYXiBpwoeSh2zGbVUhL5vpEhSm9Gm00Wc6L43Za
X-Microsoft-Antispam-Mailbox-Delivery:
    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SPF:oo%2emovingright%2enet;WIMS-DKIM:oo%2emovingright%2enet;WIMS-822:qvc%40oo%2emovingright%2enet;WIMS-PRA:noreply%40oo%2emovingright%2enet;WIMS-AUTH:PASS;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(1002268)(4900095)(4921089)(3120004)(4950112)(4990090)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
X-Microsoft-Antispam-Message-Info:
    ZdW969Ez/4mHyEZtbSq5HOPAuVUD85rjbP8oC86qtJF/ZIJDSGmjQGwa4BVuxwWk+8aiKF2HYfg3cyTFIU79jY+Hnxc1VxRPT6QqeVm5CjLPzaYLD45M89dl8s7kQEMsD3LfzTI1puwVZjPfff2WWHX1aEbg/PyktaAGKCU5sWKVvl754LzJPh/cDkiQ8b5TNPrDZBfDG0nYuhUvylTq2Y6cXJ0klQGtKwD6bsLTrqJyF6OMsZlUSsrHriIY7VeAlHWruIEuKJyFBbbTR6Ue4/PeQ9QXhCmsGcK2QN+0MI2KNco4MTsBvXIB1DJOuSM/

------=_NextPart_571E1FD8_86E7_4BD2_829A_B257F132850D
Content-Type: text/html; charset="UTF-8"
X-Microsoft-Exchange-Diagnostics:
    1;AM4PR0401MB1970;27:OEPydiXdg1o82HkMUTG0XYX75zuvBxunKAUxDkItlxqYk+4MsCz14PBBHKu1DCh0Ai5orrSvfUSC2bbODcdo49227dYXiBpwoeSh2zGbVUhL5vpEhSm9Gm00Wc6L43Za
X-Microsoft-Antispam-Mailbox-Delivery:
    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SPF:oo%2emovingright%2enet;WIMS-DKIM:oo%2emovingright%2enet;WIMS-822:qvc%40oo%2emovingright%2enet;WIMS-PRA:noreply%40oo%2emovingright%2enet;WIMS-AUTH:PASS;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(1002268)(4900095)(4921089)(3120004)(4950112)(4990090)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
X-Microsoft-Antispam-Message-Info:
    ZdW969Ez/4mHyEZtbSq5HOPAuVUD85rjbP8oC86qtJF/ZIJDSGmjQGwa4BVuxwWk+8aiKF2HYfg3cyTFIU79jY+Hnxc1VxRPT6QqeVm5CjLPzaYLD45M89dl8s7kQEMsD3LfzTI1puwVZjPfff2WWHX1aEbg/PyktaAGKCU5sWKVvl754LzJPh/cDkiQ8b5TNPrDZBfDG0nYuhUvylTq2Y6cXJ0klQGtKwD6bsLTrqJyF6OMsZlUSsrHriIY7VeAlHWruIEuKJyFBbbTR6Ue4/PeQ9QXhCmsGcK2QN+0MI2KNco4MTsBvXIB1DJOuSM/

<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><img src="MALICIOUS_URL_7" width="1" height="1">
<p style="text-align: center;">
<font face="Comic Sans MS">
<b>
<a href="MALICIOUS_URL_6">
<font color="#CC0066" size="6">Hi</font></a></b></font></p><p><center><p>
<center><font size="5" face="comic sans ms">
<a href="MALICIOUS_URL_5"><b>
<font color="#DF0101"><span style="background-color: #FFFFFF"><marquee> â©â¡â© i'm here to make you something special  â©â¡â©</marquee></span></font></b></a></center><br>
</font><a href="MALICIOUS_URL_4"><b>
<font size="5" face="MV Boli" color="#000000">
<span style="background-color: #FFFFFF; text-decoration:none">Well, I hope my new photos will melt even the coldest soul... ;)</span></font></b><p>
<span style="text-decoration: none">
<b>
<font color="#993333" size="6" face="IrisUPC">  </font><font size="7" color="#CC6699" face="IrisUPC">I want to hug you between my legs</font></b></span></p>
<font color="#DF0101" size="6">
</font>
<font color="#DF0101" size="6">
</font>
</b>
<b>
<span style="text-decoration: none">
<font color="#DF0101" size="6" face="Matura MT Script Capitals">
I'm wild and looking to hookup 
!</font></span></b></a><b><font color="#DF0101" size="6"><font size="5" face="comic sans ms" color="#000000"><a><br>
</font>
</font>
<a>
<font size="6">
<p></font>
<font size="5" face="Lucida Sans"><font size="6">â©â©â©â© CLICK HERE â©â©â©â©</font><font color="#DF0101" size="6"> </font> </font></b><font color="#DF0101" size="6"><font color="#DF0101" size="6"><font color="#DF0101" size="6" face="comic sans ms">
</p>
<p>
<center></font><font size="5" face="comic sans ms" color="#000000">
<font color="#DF0101" size="6"><a href="MALICIOUS_URL_3"><img src="MALICIOUS_URL_8"></a></center><br> 

<center><a href="MALICIOUS_URL_1"><img src="MALICIOUS_URL_9"></a></center><br> 

<center><a href="MALICIOUS_URL_2"><img src="MALICIOUS_URL_10"></a></center><br>








------=_NextPart_571E1FD8_86E7_4BD2_829A_B257F132850D--

------=_NextPart_6B34F3F8_4354_464B_B214_CE288821B8D1
Content-Type: text/plain
X-Microsoft-Exchange-Diagnostics:
    1;AM4PR0401MB1970;27:OEPydiXdg1o82HkMUTG0XYX75zuvBxunKAUxDkItlxqYk+4MsCz14PBBHKu1DCh0Ai5orrSvfUSC2bbODcdo49227dYXiBpwoeSh2zGbVUhL5vpEhSm9Gm00Wc6L43Za
X-Microsoft-Antispam-Mailbox-Delivery:
    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SPF:oo%2emovingright%2enet;WIMS-DKIM:oo%2emovingright%2enet;WIMS-822:qvc%40oo%2emovingright%2enet;WIMS-PRA:noreply%40oo%2emovingright%2enet;WIMS-AUTH:PASS;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(1002268)(4900095)(4921089)(3120004)(4950112)(4990090)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
X-Microsoft-Antispam-Message-Info:
    ZdW969Ez/4mHyEZtbSq5HOPAuVUD85rjbP8oC86qtJF/ZIJDSGmjQGwa4BVuxwWk+8aiKF2HYfg3cyTFIU79jY+Hnxc1VxRPT6QqeVm5CjLPzaYLD45M89dl8s7kQEMsD3LfzTI1puwVZjPfff2WWHX1aEbg/PyktaAGKCU5sWKVvl754LzJPh/cDkiQ8b5TNPrDZBfDG0nYuhUvylTq2Y6cXJ0klQGtKwD6bsLTrqJyF6OMsZlUSsrHriIY7VeAlHWruIEuKJyFBbbTR6Ue4/PeQ9QXhCmsGcK2QN+0MI2KNco4MTsBvXIB1DJOuSM/




------=_NextPart_6B34F3F8_4354_464B_B214_CE288821B8D1
Content-Type: text/plain
X-Microsoft-Exchange-Diagnostics:
    1;AM4PR0401MB1970;27:OEPydiXdg1o82HkMUTG0XYX75zuvBxunKAUxDkItlxqYk+4MsCz14PBBHKu1DCh0Ai5orrSvfUSC2bbODcdo49227dYXiBpwoeSh2zGbVUhL5vpEhSm9Gm00Wc6L43Za
X-Microsoft-Antispam-Mailbox-Delivery:
    abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SPF:oo%2emovingright%2enet;WIMS-DKIM:oo%2emovingright%2enet;WIMS-822:qvc%40oo%2emovingright%2enet;WIMS-PRA:noreply%40oo%2emovingright%2enet;WIMS-AUTH:PASS;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(1002268)(4900095)(4921089)(3120004)(4950112)(4990090)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
X-Microsoft-Antispam-Message-Info:
    ZdW969Ez/4mHyEZtbSq5HOPAuVUD85rjbP8oC86qtJF/ZIJDSGmjQGwa4BVuxwWk+8aiKF2HYfg3cyTFIU79jY+Hnxc1VxRPT6QqeVm5CjLPzaYLD45M89dl8s7kQEMsD3LfzTI1puwVZjPfff2WWHX1aEbg/PyktaAGKCU5sWKVvl754LzJPh/cDkiQ8b5TNPrDZBfDG0nYuhUvylTq2Y6cXJ0klQGtKwD6bsLTrqJyF6OMsZlUSsrHriIY7VeAlHWruIEuKJyFBbbTR6Ue4/PeQ9QXhCmsGcK2QN+0MI2KNco4MTsBvXIB1DJOuSM/


------=_NextPart_6B34F3F8_4354_464B_B214_CE288821B8D1--

Answer 1

2强制步骤是运行反间谍软件和反恶意软件，并再次使用outlook，只有当你改变你的密码。

目前有各种形式的附件和链接在流通，他们做的第一件事就是使用脚本读取outlook帐户密码。

在获得这些之后，他们可以做如下的事情：

• 将敏感信息(信息窃取)发送到他们隐藏的其他地址
• 发送垃圾邮件
• 发送各种SMTP攻击
• 传播相同的内容，直到有足够的无人机进行更大规模的攻击。

这类附件的问题在于，它们看起来非常合法，并且使用标准的电子邮件功能非常明确和有限，以至于它们不会被任何类似反病毒的防御系统检测到--没有AV阻止合法的outlook电子邮件。

如果您的电子邮件服务器不安全且不需要身份验证，那么窃取密码是不必要的，攻击者将能够从您服务器的任何帐户发送他想要的任何电子邮件。

源字段可以是伪造的，就像目标字段一样，因此为了查看实际发生了什么，您必须在您的电子邮件服务器上通过查看时间间隔中的日志来研究这个问题。

Answer 2

是。假设MS在您的计算机上创建一个存储电子邮件历史记录的文件(例如.pst或.ost)。每次收到邮件或删除消息或发送消息时，都会对该文件进行编辑。它是由某些规则编辑的，以便Outlook或其他程序可以打开它并显示在“文件夹”中，以方便您使用。但是，具有足够权限的其他程序可能会编辑该文件、创建发送消息的错误记录或删除真正的记录。

恶意程序也有可能从您的帐户发送电子邮件，而不掩盖其跟踪，因此发送的电子邮件在您的记录中完全准确，即使您本人并没有发送它们。