Site Security Issues : Emails

[zgap111]

Today, we had 2 unusual (coincidental) things happen.

#1 : A customer called and asked about our email regarding our bank details have changed.
- we did not change our bank. We did not send such an email.

#2 : A reply from an email I sent from Actinic v10 had an extra paragraph added to it

Email I sent:
======================================================

Dear ####,

Payment received:

BACS PAYMENT £#### RECEIVED 06/12/12, REF: "####"

You now have £#### PREPAID


Sincerely,
TRADE-WIRES.CO.UK

======================================================

In the customers reply, the email looked like this:

======================================================

Dear ####,

Payment received:

BACS PAYMENT £#### RECEIVED 06/12/12, REF: "####"

You now have £#### PREPAID KINDLY ARRANGE IT IMMEDIATELY.

Take note: We have amended our Bank details, account name still the same other details changed. Kindly note and use it for your NEW PAYMENTS.

Enclosed document with our new bank details.


Sincerely,
TRADE-WIRES.CO.UK

======================================================

I've highlighted the red parts that are in the customer's reply.
It looks like the customer received a modified email from us.

Two events, both about our bank details changing
- looks like some sort of scam to get our customer's to pay to a different bank account.

We have been in touch with Essex Police, and they advise us to ask a few questions:
One of them was: "Are there any security issues with Actinic v10.0.4" ?

Hope I can get a response from someone at Actinic Software on this one.


Thank you
Rgds, Tak.

[cbarling]

We're not aware of anything specific that might cause this within SellerDeck (Actinic).

At first sight, it would seem that this is being attached by your email server. What hosting company do you use and have you checked to find if something is set up within your email system that might add this on?

Chris

[Duncan Rounding]

Was there a document enclosed/attached with bank details as the text mentions?

[Darren B]

have you checked your actinic template for these emails? is that still the original?