Categories: Managing Settings and Mail :

Spam email sent from my account

Showing 1-36 of 36 messages
Spam email sent from my account cahubble08 4/26/09 11:08 AM

Someone is sending email from my account. I've seen multiple complaints posted on Gmail message boards and yet the problem HASN'T been solved and keeps recurring.

I'd really like Gmail to step up to the plate and be more responsible about this. I've changed my password multiple times, I've used Spybot and AdAware to clean my system, I scan weekly with updated Norton definitions. I've also shut down the POP access to my email account. 

And STILL... STILL... these emails are being sent.

It is my opinion that someone has figured out how to bypass Google's security measures and that is really alarming to me.

And I just don't get how any responsible company can say to its users, "we're working on it. Leave us a message and we WON'T get back to you..."

Is it at all possible to actually speak to a customer service agent at Google? I haven't figured out how to yet... COMPLETELY UNACCEPTABLE.

This problem needs to be solved or I'm going to LEAVE GMAIL!

Re: Spam email sent from my account stepp2 4/26/09 11:27 AM
I have the same problem, a couple months already .. this is really annoying... I'm fed up with this .. Google solve the problem, or I'm leaving to!
Some china bastard is sending me e-mails from my adress, god knows how. My comp is clean, using IMAP to access mail.. my bet is that china goverment had something to do with this..
Re: Spam email sent from my account cahubble08 4/26/09 11:47 AM
I've shut down POP access to my account... will see if that helps... but I doubt it... it just burns me up that Google refuses to respond to emails and won't provide a customer service phone number... who does that?
Re: Spam email sent from my account stepp2 4/26/09 12:07 PM
i now what you mean.. I dont think shutting down POP or IMAP will help  .. read this : http://mail.google.com/support/bin/answer.py?hl=en&answer=50200#
Clearly, it is bounce from spam server of that china spam idiot, and using our mail adresses as 'reply to' option ..but why google cant make rule that sender and 'reply to' adress has to be the same, if the sender is from google accounts, and bounce all others?
Im waiting almost 6 months for them to solve this, and I'm really pissted....
Re: Spam email sent from my account LMcKin51-Top Contributor 4/26/09 12:17 PM
When you send a letter through the post, you generally write a return address on the envelope so the recipient can identify the sender, and so the post office can return the mail to the sender in the event of a problem. But nothing prevents you from writing a different return address than your own; in fact, someone else could send a letter and put your return address on the envelope. Email works the same way. When a server sends an email message, it specifies the sender, but this sender field can be forged. If there is a problem with delivery and someone forged your address on the message, then the message will be returned to you, even if you weren't the actual sender.

If you've received a reply to a message that wasn't sent from your address, there are two possibilities:
  1. The message was spoofed, forging your address as the sender.
  2. The original sender used your address as a reply-to address so that responses would be sent to you.
Neither of these possibilities indicates that your account was compromised, but if you're concerned that your account may have been compromised, you can check recent access to your account. Just scroll to the very bottom of your inbox and click the Details link next to 'Last account activity.'
Re: Spam email sent from my account Joshua 4/26/09 12:18 PM
@stepp2, you are correct that google has a complete and accurate (as far as I can tell) response to this problem at the reference below.

As to why google can't simply drop these messages, its because it is not at all uncommon for people to send themselves email (making the from and to the same) and it is also not uncommon for people to send email with their gmail From address while using another outgoing mail server. If gmail followed your suggested rule, it would bounce tons of legit email.
Re: Spam email sent from my account stepp2 4/26/09 12:24 PM
@ LMckin51
I just posted that link in my previous post.. your post is nothing new, you are only quoting this google post about problem ... what about solution, bro
Re: Spam email sent from my account cahubble08 4/26/09 12:30 PM
READ MY ORIGINAL POST PLEASE!!!

NONE OF THE RESPONSE YOU HAVE PROVIDED ABOVE APPLY TO THE PROBLEM I AM EXPERIENCING!!!!

SPAM MAIL IS SHOWING UP IN MY SENT ITEMS BOX!!! MAIL THAT I DIDN'T SEND!!!

I HAVE APPLIED ALL OF THE SUGGESTED SOLUTIONS PROVIDED IN THIS HELP FORUM... TO NO AVAIL!!!

IF YOU CONTINUE TO POST BOGUS "SOLUTIONS" TO THIS QUESTION, I WILL REPORT YOU FOR ABUSE!!!
Re: Spam email sent from my account stepp2 4/26/09 12:30 PM
@ Joshua
I now that is the problem. What if everybody has the option to ask for that restriction? Google could make that as a option for all acounts... Im sick of this spoofing attacks, and I would ask for that option for my account. Bounce everything that does not have my sender and 'reply to' option as a same adress.
Re: Spam email sent from my account LMcKin51-Top Contributor 4/26/09 12:31 PM
stepp2,

If you check the Headers you will see that the email was send from a diffrent mail server. and if you don`t see anything in your Last account acivity then the email was Spoof.  and my and Joshua post is link to same Help Articles.
Re: Spam email sent from my account LMcKin51-Top Contributor 4/26/09 12:34 PM
cahubble08,

Please Do not used all Cap Letters
Re: Spam email sent from my account cahubble08 4/26/09 12:34 PM
I CHECKED THE HEADERS!!! READ MY ORIGINAL POST!!!
Re: Spam email sent from my account stepp2 4/26/09 12:36 PM
this is pointless. bye /
Re: Spam email sent from my account cahubble08 4/26/09 12:36 PM
@LMckin51 and @Joshua:

I have reported you both for abuse. The "solutions" you are posting are carbon copies to other questions and have not actually addressed my original question. PLEASE read my original post and stop cluttering the board with bogus solutions.
Re: Spam email sent from my account Joshua 4/26/09 12:52 PM
@cahubble08: Take a deep breath and try to relax. As described in the article that has been posted three times to this thread, there are two possibilities:
1. Your address was spoofed by a spammer; or
2. Your account was compromised by a spammer and is being abused to send spam.
Because of the way gmail works, mail can appear in your sent mail folder even if it wasn't sent directly from your account.

LMckin51 has already given you instructions on how to tell which is the case by examining headers and last account activity. A third check is to look at the To addresses. If these are your contacts, then your account was compromised.

If your account was compromised, the same help page contains detailed instructions on how to clean up and how to prevent it from happening again. (See the last link.) While you may believe this was caused by a security flaw in gmail, none of the reports previously seen on this forum show any evidence of this. Instead, these account compromises happen when a spammer steals your password (through phishing, viruses/spyware, weak passwords, using the same password on multiple sites, etc.)
Re: Spam email sent from my account Chuck Nozzle 4/26/09 2:20 PM
Try checking the Vacation Responder under the Settings in Gmail. I had the same problem, and what was happening was that the "hacker" or "spoofer" had set up a Vacation Responder that responded with a spam like message to every email that was sent. Hope this helps.
Re: Spam email sent from my account Chuck Nozzle 4/26/09 2:27 PM
And try setting the Browser Connection to Always use https. This will help keep your account more secure.
Re: Spam email sent from my account Sarah 4/27/09 11:08 AM
Hi everyone,

I'd like to confirm that Joshua and LMckin51 have provided exactly the correct answers. Thanks to both of you! As Joshua said, messages can appear in Sent Mail if they are "from" your address, even if the header is spoofed. We hear you that this can be a confusing and scary experience, and we're taking your feedback into consideration.

In the meantime, please refer to our Help Center article about this issue. Using your Last Account Activity, the full headers of the messages, and/or the recipients, you can figure out whether the messages are spoofed or were actually sent from your account. Unfortunately, spoofing is an industry-wide problem that can affect any email provider, and not just Gmail. If your account was actually used to send the messages, change your password immediately and follow all of the steps in the article. We have closely investigated these cases and can confirm that there is no backdoor or security vulnerability in Gmail's servers. Rather, it is highly probable that your password has been guessed or compromised through other means, for example, if you use the same password for both Gmail and for another website.

Both spoofing and account compromises are annoying and damaging -- something the whole Gmail team recognizes, and something we think about as we continue our efforts to improve Gmail.

Best,
Sarah

PS - For the latecomers to this thread, you can expand the response history by clicking below to find additional information about headers and spoofing.
Re: Spam email sent from my account stepp2 4/27/09 12:48 PM
@Sarah (Google Employee)
For the record, I'd like to confirm that Joshua and LMckin51 don't even read the posts they are answering...  Like I said before, my account is NOT compromised. Only I have password for my account, NOBODY can access my account.  

The problem is that (in my case) some spam idiot from China is bouncing HIS mails from HIS server to my account. All he needs is one server (to bounce mails) and one mass-mailing client (to send mails). He is changing his server address and dns records every day (I think he does that randomly, resetting his modem with dinamic ip or dyndns account or whatever the hell he is doing) the server address is in this form:

Received: from ?81.195.225.58? ([81.195.225.58]) by mx.google.com with ESMTP
 id 23si2474668mum.5.2009.04.27.05.54.38; Mon, 27 Apr 2009 05:54:39 -0700 (PDT)
Received-SPF: softfail (google.com: best guess record for domain of transitioning xxx...@gmail.com does not designate 81.195.225.58 as permitted sender) client-ip=81.195.225.58;
Authentication-Results: mx.google.com; spf=softfail (google.com: best guess record for domain of transitioning xxx...@gmail.com does not designate 81.195.225.58 as permitted sender) smtp.mail=xxx...@gmail.com
Message-ID: <49f5ab0f.170d660a.590e.fffff546SMTPIN_ADDED@mx.google.com>
X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9

 .. In my previous posts I have asked Google to add an option to googlemail to choose if we want to have the same 'sender' and 'reply to' header as the same, and to bounce ALL other emails that have different 'sender' and 'reply to' field in the header of the email. This option would only apply to the mail adress of the owner of the account on googlemail server. No other mail (from any account, except the owner's account) with different sender and reply to option would be bounced.

Now it seems that bounce started to come from other countries like Russia ...
Please, Google, Sarah from Google, make it happen.. 'sender' and 'reply to' to be the same, for owner's account as an option in g-mail settings....That would stop the spoofing attacks at least in the short run... The current situation is unbearable.... Maybe you could make that as a special filter? The current filter settings are too rigid to be sure that all possible situations are included when mail can or cannot access mail account. I know that first hand....
Another thing is that when I access through IMAP mail on the Google server, all mail that i MARK AS SPAM and that include my email address also include emails in my sent folder ..  so I can't mark these spam messages as spam, or I have to be very careful , and do it manually, over and over again ..(and that's the thing that bugs me the most) .../ ..
Regards
Re: Spam email sent from my account shaheerk 5/3/09 10:15 PM
Maybe this should help:

THIS
IS
A
SPAM
TACTIC

Does that make any sense? This question has been asked a numerous number of times, and the only answer to this is that this is a way of trapping email users into more spam.
Re: Spam email sent from my account nolo 5/19/09 6:16 AM
The best advise I ever received about spam/security is that it requires a multi-layered routine in order to be more effective. Without repeating changing your pass and the likes..

 I use ' thunderbird '  as my mail client, first thing I do after I setup my *' imap '* accounts is create a filter.

Basically " From: " " Contains "  " mygmail...@gmail.com " is moved to spam folder. done. Now anytime you send yourself an email you can check the spam folder..

Note: The " Mark as spam " feature in thunderbird 'learns' which mail is good/bad as you get more email or spam. I used to get/open about 50+ spam daily.. now its about 3-4..

This way I'm using gmail and thunderbird to save me *time*.

cheers, please dont forget Gmail only costs $0.00 per 100,000 emails. Learn, Overstand, Share.

Unitil the whole spam thing is figure out you can grab a copy of a FreeOpenSourceSoftware email client

Thunderbird  win32, *nix, etc
Evolution

~nolo
Re: Spam email sent from my account avikumarthakur 3/7/10 7:49 AM
@LMckin41

This is a part of my msg header . is it spoofed or not . plz help..

Delivered-To: tha...@gmail.com Received: by 10.229.199.205 with SMTP id et13cs98382qcb; Sat, 6 Mar 2010 10:47:15 -0800 (PST) Received: by 10.91.19.11 with SMTP id w11mr2953172agi.114.1267901235172; Sat, 06 Mar 2010 10:47:15 -0800 (PST) Return-Path: <tha...@gmail.com> Received: from win04.winwinhosting.com (win04.winwinhosting.com [65.182.191.34]) by mx.google.com with ESMTP id 11si4690737ywh.37.2010.03.06.10.47.14; Sat, 06 Mar 2010 10:47:15 -0800 (PST) Received-SPF: neutral (google.com: 65.182.191.34 is neither permitted nor denied by domain of tha...@gmail.com) client-ip=65.182.191.34; Authentication-Results: mx.google.com; spf=neutral (google.com: 65.182.191.34 is neither permitted nor denied by domain of tha...@gmail.com) smtp.mail=tha...@gmail.com Received: from stylecan9epkzv ([65.182.191.34]) by win04.winwinhosting.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Mar 2010 00:17:15 +0530 thread-index: Acq9XXC4nvXYts8HTD6cq716bc3puA== Thread-Topic: Auto Reply from Joy Travels for Outbound Tour Itineraries / Best Of Asia- Singapore,Thailand, Malaysia From: <tha...@gmail.com> To: <tha...@gmail.com> Subject: Auto Reply from Joy Travels for Outbound Tour Itineraries / Best Of Asia- Singapore,Thailand, Malaysia Date: Sun, 7 Mar 2010 00:17:15 +0530 Message-ID: <E1D364DAEE2E4CFCB568636B44AEDF7E@stylecan9epkzv> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_040B_01CABD8B.8A72E5D0" X-Mailer: Microsoft CDO for Windows 2000 Content-Class: urn:content-classes:message Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325 Return-Path: tha...@gmail.com X-OriginalArrivalTime: 06 Mar 2010 18:47:15.0437 (UTC) FILETIME=[70BAA9D0:01CABD5D]

Re: Spam email sent from my account shaheerk 3/7/10 12:27 PM
That's spam. I can't find the "From" address (as in - it's not different) and the subject says "Auto Reply from Joy Travels for Outbound Tour Itineraries / Best Of Asia-Singapore,Thailand, Malaysia".

However, the domain that the email was received from was win04.winwinhosting.com and there's not much on that site... except that the webhost is Indian.

Here are a few things you may want to remember:

1) companies usually use their own domains to send mail.
2) in an email where the "from" and "to" address are the same (i.e., the "from" field says "me"), it's usually spam if you KNOW you did NOT send it.
3) report them as spam. Reporting them as spam is NOT the same as reporting it as phishing, mind you.

Another thing: in the headers, it says:

Return-Path: <thakur--at--gmail.com
Received: from win04.winwinhosting.com (win04.winwinhosting.com [65.182.191.34])

Return path is the "from" email address. Note how that says "...@gmail.com" but it doesn't say google.com in the line below - that's spam.

Hope this helps.
Re: Spam email sent from my account Lostbear1900 4/21/10 3:09 PM
Yes, I think most people are aware of the return to address in emails-- but what is the actual point of it nowadays? The receiver will obviously see the source address and reply to that!

Besides, the source address should always be the thing to show, not the faked return address.  

There are times that technology does not make sense to me, and this is one of these cases. Yes, someone is spoofing my gmail and causing me much grief.  I only wish that common sense would prevail and that would lead to the removal of this return to address option in emails completely (which is only used by spammers btw.)

Or why can't email providers just automatically bin emails with differing source and return addresses. Or better yet, bin emails have include a return address? and only allow emails through do not include a return address.

Another option would be to enable a white list / blacklist setup which can be found on professional hosting packages!

In the past week I've had over 3000 spoofed-bounced messages from official domains (bounce mail spam to bypass official spam filters.) To the point I've had to create custom filters to bin that trash automatically.
Re: Spam email sent from my account shaheerk 4/22/10 11:35 AM
I'll try answering your queries one by one:

- some websites have differing source email addresses - for instance, Gmail doesn't fully spoof your email address as a security measure. If you want to, use another (private) SMTP server. It's an added security measure. Actual point of it nowadays is - well - various!

- Good point about the removal of the email address. For that, you can report an email address as abuse, and/or report it as spam. Either way, the systems are tweaked (however small the tweak may be) and try to prevent such situations from arising again.

- Automatic trashing: nothing's perfect. False positives can occur everywhere. Hence, no automatic binning. However, Gmail (and a few others) give some lead time before emptying the email in your spam/trash folders.

- whitelisting: I don't know if it's in the Apps for your Domain services, but I'm guessing there is a feature like that (via Postini). I don't use Apps so can't say much on that, I'm afraid (although I'm 80% sure there's an option like that)

- looks like your email address is (a) easily spammable, ,or (2) got leaked on the internet. Gmail should catch the spam it gets (I've practically hidden the Spam label from my inbox - even if I get false positives, I hardly check the folder) although filters are a good idea on extreme cases.

Any more questions? :)
Re: Spam email sent from my account Lostbear1900 4/22/10 12:05 PM
I really wish that it did catch the spam!

Yes, it seems that my email is knowing to them (spammers.) It's one of those old ones from when gmail first started :)

The problem is that the spammer(s) are registering addresses at legit domains, then spoofing my gmail to send mass spams to them. All of which bounce right back into my inbox and gmail is not catching it.

At one stage I was checking the headers, finding the source IP and reporting it back to the ISP listed. But the spoofs seemed to be coming from all over the world so I gave up reporting it all lol.

I know that there's nothing I can really do about it and I have read into this a lot recently.

Like, setting SPF to -all (to help stop spoof mails.) But according to someone on that thread-- gmail has their SPF record set to ?all (which allows the spam through.) Maybe that post is old, I'm not sure. I even read that SPF is useless if both ends aren't using it (aka-- one domain is official, the other is an open relay for spam.)

My paid for domains has things that spam-hammer. spam-assassin, post-ini and user/account level filtering, white listing all enabled and I've got all my domain SPF record set to -all, with catchall domains off.

I just find it really sad that my favorite email, my old free gmail is being spoofed to death. Feels like a violation and it's frustrating that there is nothing I can do about it!

Thanks for the helpful reply though, I'm just hoping that in the near future return-to addresses will no longer be around. Or if they are-- will need to provide login details for that return to address before it will even process.
Re: Spam email sent from my account johannes.stark 5/8/10 7:02 AM
Hi
I am having the same spoofing problems (i.e. spam being sent from my account without compromising it. 
I would like an option to disable sending emails from my account. I would then enable sending only when I am on and want to send something. Is something like this possible?

Thanks,
Johannes
Re: Spam email sent from my account noble24 7/11/10 9:29 PM
ok im getting the same problem.iv checked my sent messages box and the emails are not showing up in there.i dont know how to get in contact with google to tell them whats going on.i dont know where to look for when my account was last used.iv changed my password to.i dont know what to do.what do i click to tell google my problem?what do i click to see my acount activity?
Re: Spam email sent from my account shaheerk 7/12/10 2:56 AM
For your account activity, right at the bottom of Gmail, you'll get a link to open a window showing your account activity.

Meanwhile, please change your passwords and check your PC for key loggers or viruses
Re: Spam email sent from my account Red-Beard 9/18/10 3:22 PM
@Sarah

I recently experienced this same thing, however gmail password was changed on me.  Would this have been done as an automated precaution?  I was able to recover using the text message option, however I'm worried that my account may have actually been compromised.  The Recent Activity log seems okay, so I'm really not sure where to go from there.  Is there any way to find out why I was blocked?

I read somewhere that it could possibly be due to me reporting the bounce-back emails as spam/phishing.  Do you know if this is true?

Thanks for your time!
Re: Spam email sent from my account sarmasen 9/22/10 8:19 PM
Well, i can state the following :  I am heaving same issues, and have noticed that it seems that my account is compromised. i have been able to determine following by using Activity information in Gmail account: 
UnknownSouth Korea (nic.co.kr:210.127.253.15)Sep 19 (4 days ago)
UnknownJapan (hankyung.com:210.96.202.24)Sep 19 (4 days ago)

Those are the ip numbers that were accessing my gmail account, and even tho i have clean computer which was checked with nod32, it seems that mails have been sending themselves from my MOBILE phone (Android, HTC Magic) i still cant determine which application is doing it, but i have found 5-10 suspicious apps, which i NEVER even downloaded or installed over sd-card. Mails are consisting of following :


 Hello,
This is an automated notification regarding your World of Warcraft account. Your account options was recently modified through the Account Management website.
*** If you did NOT make any changes to your account or subscription, we recommend you login to Account Management at the following link to review your account settings:
http://www.worldofwarcraft.com/account/billing/
If you cannot sign into Account Management using the link above, or if unauthorized changes continue to happen, please contact Blizzard Billing & Account Services for advanced assistance.
Account security is solely the responsibility of the accountholder. Please be advised that in the event of a compromised account, Blizzard representatives will typically lock the account. In these cases the Account Administration team will require faxed receipt of ID materials before releasing the account for play.
Regards,
The World of Warcraft Support Team
Blizzard Entertainment
http://www.blizzard.com/support/wowindex/



WHICH IS OBVIOUSLY A SPAM / PHISHING MAIL.  good thing is, it is randomly sending mails, and still not using my address book.. it is impossible for me to stop sending those spam mails until i try clean reinstall of my mobile phone, since someone has my new password the moment i change it. good thing is also, that i dont have wow-armory on my phone or else i fear that my account details would be compromised too.  if anyone finds this helpful i will give you the first part of message, which is :



Delivery to the following recipient failed permanently:

    oz...@lycos.de

Technical details of permanent failure:
The recipient server did not accept our requests to connect. Learn more at http://mail.google.com/support/bin/answer.py?answer=7720
[lycos.de (1): Connection refused]

----- Original message -----

Received: by 10.151.133.15 with SMTP id k15mr8041680ybn.78.1284930009383;
       Sun, 19 Sep 2010 14:00:09 -0700 (PDT)
Return-Path: <MYGMAIL...@gmail.com>   U DONT NEED MY EMAIL ADRESS REALY :)  
Received: from uxnaxyxq (ipsa.hankyung.com [210.96.202.24])
       by mx.google.com with ESMTPS id t20sm2570236ybm.17.2010.09.19.14.00.06
       (version=SSLv3 cipher=RC4-MD5);
       Sun, 19 Sep 2010 14:00:09 -0700 (PDT)
Message-ID: <865E988F2C95DE59931945144C896D24@uxnaxyxq>
From: Blizzard  Entertainment <MYGMAIL...@gmail.com>    U DONT NEED MY EMAIL ADRESS REALY :)
To: <oz...@lycos.de>
Subject: Worldofwarcraft Account login
Date: Mon, 20 Sep 2010 05:00:01 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
       boundary="----=_NextPart_000_0EAD_01B31C9E.1014F7E0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512



I hope someone finds this information helpful  !!!
Re: Spam email sent from my account rifter0x0000 9/22/10 8:46 PM
Guys, like the support people said, spoofing does not require connecting to or hacking gmail's mail servers.  It's usually done from poorly configured servers or from intentionally wrongly configured servers (in the case of the servers being owned by the spammers).  Properly configured mail servers don't allow you to send mail from an account that is from a different domain (as in this case) or nonexistent on that machine, and don't allow you to send mail at all unless you can log in as the account you wanted to send mail from.  But none of that prevents people from spoofing your address.  They don't even have to find your address to do it, either, although spammers do harvest addresses.  They can just guess, because on such servers you can send from any email address you type in.
Now as for the thing where this mail shows up in your "sent mail" box "because of how gmail works,"  I am perplexed.  It doesn't make sense to me that a mail would magically appear in your box on your account if it was never sent from google's servers and never touched them.  That's impossible.  If mail that comes from outside appears in your sent mail box after it hits google's servers, then it makes a lot more sense.  It does make troubleshooting harder though.  Normally if you saw mail in your sent mail box it would indicate it was sent from your account by actually logging in, not just to the account but from the actual web interface to the account.  But it seems like they are saying it does not work that way, and you should believe that.
The other stuff mentioned, as in deciphering the headers and looking at account activity, are definitely key to troubleshooting these things, and pretty much the only way to be sure.  I think headers can be spoofed to some extent as well but that is harder and there is still a trail either way.  Nevertheless if this happens to you, don't panic.  It is way more likely your address is spoofed than that your account was hacked.  It's been a tactic for many many years now, and it will pretty much never go away.  It has nothing to do with google or what they are doing; it's just life on the internet.  There's really nothing they can do about it other than help you troubleshoot after the fact.  Other than that you can check things out if you are worried and make sure your account has not been compromised; just keep in mind it probably hasn't since it is way easier to spoof an address than it is to hack someone's account.  
It does help if you use good passwords.  The longer the better, with as much mix of caps and small letters and numbers as you can use and still remember the password.  Easy passwords take less time to crack.  If the password is longer and more complex it takes longer and in some cases relative to computer time forever to crack.  People are going to tend to go for low-hanging fruit.  They'll spoof your address more likely than hack your account, and if they do break into systems it's usually exploiting some flaw in software more than trying a brute-force attack on passwords (which does happen, but less often).  I think in google's case it is more unlikely they will miss a security flaw than a lot of other companies, although I am sure they would be a high-value target for some people.

Re: Spam email sent from my account sarmasen 9/22/10 10:27 PM
As i stated, in my case, when i check my activity information, there are IP's from Korea and Japan, meaning someone from those countries had access to my password and account name. Computer is clean, so it had no trojans or loggers, only thing that crossed my mind is that it was done from my account (some application had access to the details of my gmail account) after wiping my HTC Magic, i started analyzing all software i had ever installed on my phone, only one (for now) strikes me as possible culprit : chompSMS it states following : 

The application has access to the following (mouse-over for description):
System tools
automatically start at bootprevent phone from sleepingdisable keylockread system log files
Your messages
read SMS or MMSedit SMS or MMSreceive SMS,receive MMS
Your personal information
read contact datawrite contact data
Phone calls
read phone state and identityread phone state and identity
Services that cost you money
send SMS messagesdirectly call phone numbers
Network communication
full Internet accessview network statefull Internet access
Hardware controls
control vibrator
Storage
modify/delete SD card contents
Your accounts
discover known accounts
Your location
coarse (network-based) locationcoarse (network-based) location
Other permissions
com.android.launcher.permission.UNINSTALL_SHORTCUT,com.android.launcher.permission.INSTALL_SHORTCU


what striked me was third line from the bottom:  

Your accounts
discover known accounts

that should be investigated if you ask me.... thats all from me now, and i will try to find out what caused my phone to reveal my Gmail details away....
Re: Spam email sent from my account sarmasen 9/23/10 12:19 AM
New app that also has the: Your accounts discover known accounts  option enabled within it is : Contact2Sim
Re: Spam email sent from my account sarmasen 9/23/10 12:53 AM
Google should really get employees to test every new application before putting it on the Market, because of PRESERVING THEIR OWN REPUTATION !  after installing several applications like those wallpaper ones, contact2sim, and chompSMS which all required you to allow them to access following : 

-Your accounts
 discover known accounts

-Your location
 coarse (network-based) location,   coarse (network-based) location


some of those developers of those applications had used its app to get my Gmail account name and password and use it for spamming / phishing. I had to : check my computer with 2 different antivirus programs so i could be sure that i have no trojans loggers or any other malware on my PC, after it checked out to be clean, only conclusion was that my info was stolen using software on my phone, that was acquired using MARKET !!  

@ Google employees and whomever it may concern: seriously, get your priorities sorted out, cause it doesnt do you any good to harm yourself like this !!  When you decide to guard your own reputation and interests, feel free to contact me to be your tester. -.-

That said, this is my last post in this thread, since it is obvious what is happening.... i will be replying on other peoples questions - comments.
Re: Spam email sent from my account J, Coleman 11/8/10 4:21 PM
IMPORTANT:

1) Are any of you having emails sent out from your account to those listed in your gmail contacts list? In other words, it's not just that your email address is listed in the "from" field but that the "To" field includes your contacts (even your own email address which is how you found out about the email in the first place)?

2) Do any of you use the Gmail Checker Plus extension to notify you of new email?

I welcome your feedback.

Peace,

- NightRocket
More topics »