Mailbox Security Checks

A common method of fraud is to crack the password of a mailbox and then add an email forwarder so that a copy of all mail is forwarded to an illegitimate address.

Perform the following safety checks regularly:

1. Change your mailbox password
2. Check for illegitimate mail forwarders

Webmail

1. Browse to the Webmail login page (https://webmail.konsoleh.co.za)
2. Login with your full email address (eg. [email protected]) and email password. (passwords are case-sensitive)
3. Click on the Settings icon (cog) at the top right

1. Choose Settings > Manage Mailbox
2. Log in using the same login details as earlier
3. Under the Forwarders section, check that any email addresses listed here are legitimate.
4. To remove a forwarder, delete the email address
5. Ensure that no private information, such as the password, is listed under User Note
6. Click on Update Mailbox at the bottom of the page 

1. Choose Settings > Filters
2. The Filter set is Roundcube
3. Under Filters check that any filters here are legitimate. The details of the filter are reflected in the right pane
4. To delete a filter, click the cog icon at the bottom of the Filter pane and select Delete

Manage Accounts

Forwarders can also be managed within the Manage Accounts tool in konsoleH, and is convenient for managing all mailboxes for a domain. Note, though, that mail filters cannot be viewed here.

1. Browse to konsoleH and log in
2. Access the Hosting Services tab on the relevant domain
3. Select Mail from the left-hand menu
4. Select Manage Accounts
5. The main window will display all the active email accounts already in use for the domain
6. The + Forward fields (numbered 2 to 6) allow you to forward a copy of all emails received to an external email address that is unrelated to your domain. Check that any forwarders listed here are legitimate.
7. To delete a forward, click Edit in the relevant row, then remove the email address listed
8. Click Save

An invoice from a supplier could be intercepted in this way. The invoice is then fraudulently updated with the hacker’s banking details, and resent. Such an email would look legitimate and result in financial loss.

Even updating the mailbox to a strong password won’t remove any current forwarders, so it is important to check for forwarders when updating the password on a regular basis.