I would suggest checking the Bigpond account settings in their web portal for any email forwarding rules setup on that account. Perhaps the account was compromised and setup to forward-copy all email to another server where it is then tampered with.