Securing a Compromised Faculty / Staff Email Account

Issue/Question

I think my account has been compromised. What do I do?

Cause

The account may have been compromised and malicious activity may have occurred with the Exchange account.

Resolution

1. Reset your WKU Account password immediately.
2. Log in to your email.
3. Click Settings.
4. Select Mail tab. 
5. Select Rules.
6. Delete unrecognized inbox rules by clicking and then Delete rule.
7. Select Sweep.
8. Delete any unrecognized Sweep rules. 
9. Select Forwarding.
10. Un-check Enable forwarding and delete any email addresses that are not yours. 
11. Click Account.
12. Click Signatures.
13. Select Compose and reply.
14. Click Edit and remove any malicious content in your email signature(s).
15. Close Settings window.
16. Click circular Account manager icon in upper-right corner.
    Note: This icon will be your initials by default. If you have uploaded a custom profile picture, you'll see that instead.
17. Click View account.
18. You can view your personal information here. Ensure that all information is correct.
19. Your account is secure again. Send yourself an email from a non-WKU account to ensure you can still send and receive.
20. Once secured, contact the ITS Service Desk immediately to report your compromised email account.