Email Security: Password Changes Alone Are Insufficient After Hacking

IT security researcher Mike Kuketz warns that simply changing a password is insufficient after an email account has been compromised. Attackers often leave behind hidden access points to maintain control over a user's communications.

To fully secure a hacked account, users should check five critical areas: automatic email forwarding rules, which allow attackers to read messages without logging in; filter rules that might hide security warnings or confirmation codes by moving them to archive folders; active sessions that should be terminated; connected third-party applications and services; and recovery options, such as ensuring no unauthorized email addresses have been added for password resets.

Additionally, users are advised to check if other linked accounts have been affected. Organizations such as the Federal Office for Information Security (BSI) and the Police Crime Prevention units provide further guidance on prevention and response.