At noon on Monday, Dropbox sent out an email saying that Peter had invited the recipient to view a file.
I hadn’t. THIS WAS A SCAM!!!
When recipients emailed me back to check if the invitation was genuine, the scammers redirected the email to Deleted Items, presumably so that I would not see it.
They then sent a reply themselves, pretending to be from me, apparently confirming that I had sent the original Dropbox request.
In the meantime, they have cleared out my entire Sent Items folder. (We’ll get them back — it’ll just take a bit of time.)
My Dropbox account is now closed so I CAN’T send you anything via Dropbox..
And do not click on ANYTHING in the scammers’ emails. Or reply to them.
Otherwise, my email account is now working normally again..
One of the “Dropbox” emails that was forwarded to me identified the sender as an “Andy Perryman”.. The computer from which the attack on my email originated purports to be located at the University of Manchester. We have the IP address.
The full might of Dropbox support has looked into the matter. The most likely explanation is that once they had access to my email account, they used the password reset feature to change my Dropbox password. In other words,, it was not a Dropbox problem.
The moral of this tale? Change your password, make it a strong one, don’t give it to anyone else, don’t use it for anything else (i.e. the usual stuff), and turn on double verification so that if anyone else tries to login, you’ll get a text message and they won’t be able to do so unless you respond to it appropriately.