Original Issue
About 8 month ago, I started receiving in Mail app(now updated to 9.3 version) bounce back of email sent to people I had already communicate with and present in the cache/contact of the application Mail. This message of course offer to my contact list as nice email with a virus link in it. The time log for message sent was at specific time, sometime only computer was shut down, and in the middle of the night I was sleeping. I thought it could be the phone, but when I left 1 week outside the country in Dominican Republic with phone offline for almost a week, mac shutdown for a week, in the middle of the week I had open the cellphone to access business mail, then shut it down for 3 more days, and in the middle somewhere there it happened.
I do not remember clicking on any sort of link like that previously, but my session is set to administrator so I do not require password for most of the actions. Mail is installed on my iPhone 6 (V9.3.2) and on my Macbook Pro end of 2013 upgraded to El Capitain (V10.11.5). Issue started on Maverick.
Verification and analysis
I verified my outbox on the mail app, nothing unusual. I verified my outbox on the server, nothing unusual. I changed the password on my mail account hosted on Funio Server (Funio.com), and I changed the password on Funio account, but never at the same time. Situation happened about once per week at the beginning, then when I was changing a password, it would take 3-4 week and start again but still it happened.
Troubleshooting attempts
- I formatted my iPhone from scratch, adding application one by one not using the backup except for icloud portion with music, password app, and purchase, but problem happened again.
- I tried to first change my password on my funio server, then change my Mail password immediately, and went in the Password feature of Safari to delete the password in there to it ask next time. Rebooted computer and then re-logged on Mail.
Everything was fine for about a month but it started again.
- I formatted my Mac completely starting from scratch and adding back my application one by one and re-populating my Password feature for Safari one by one, except for what ICloud had memorised.
1 week later I got bounce back, but since then nothing, that was 5 weeks ago.
I did not identify the trigger that make this happen, but I am pretty sure it does not come from the Mac nor the iPhone, but I am wondering if something would not install without my approbation on one of the device, and sent my updated password on this spam server. It could be triggered by one of my action, and with delay operate email delivery from a remote location. I am suspecting that this last bunch of email receive after formatting the computer could have been delayed for delivery on the fake server // but I had again after formatting reset all password of course, so it does not make sens that this issue would be from the server only. On our server we have multiple user as well and no one else get such bounce back.
As anyone ever experience such? I am running out of scenario to fix this, and I am not a programmer, but I do know how to try to isolate the problem to narrow it down. I just need help to find the fix, if there is any.
Only reason why I bring this, is because I found out that proceeding with action such as changing password delayed the bug, and format even more so far.
