Gmail Joe-Jobbed, spam sent to all contacts, no sign of forced entry.
-
This morning, a relative called saying I had sent them spam from my Gmail account. I ran to the computer, checked Gmail's login history, but found nothing suspicious. I checked the spam folder, and sure enough, two pieces of spam with a link to a phishing site which Safari immediately picked up as such (I know, bad idea to click it at all) had been sent to every one of my contacts. I know anyone can spoof anyone else's email, despite the best attempts at protection by Gmail and such. My question is: how did they get my contacts? How can I make this spoofing harder, or at least prevent access to my contacts in the future?(Further details inside.) The exact same thing happened a few months ago, and in fact, seems to have happened to another MeFite (http://ask.metafilter.com/266800/Spam-from-my-account). Based on the headers, these asshats seem to be in a different place in Europe each time, including England, Spain, and Italy. (I'm in the US, and haven't been to any of those countries in years.) I looked in Gmail's "revoke" menu, but didn't find any suspicious-looking applications, just my phone and Google Voice. I've done the "sign out of all Gmail sessions". No viruses or malware on any computer that I've used in the past year. I'm not one to log in recklessly from public computers. There WAS an incident of a hacked email on the network of an organization that I belong to.
-
Answer:
It may be that they didn't get your contacts, but someone else who has a lot of contacts that overlap with you. If you've got a friend with, oh, a Yahoo account who shares a lot of the same contacts, it's possible that they got hacked, their contacts mined by the hackers, and your name picked at random as the "from" address.
Seeking Direction at Ask.Metafilter.Com Visit the source
Other answers
Having just received a flood of "your message could not be delivered" messages in my Gmail, I will be watching this thread closely.
EatTheWeak
When you say that you checked the spam folder and saw the messages, do you really mean the Spam folder? Because that's just for incoming messages. If you saw the messages in your sent folder, then that's a different story.
thewumpusisdead
No, they are not in the sent folder, so this is obviously a spoof, not a true break-in. Still, how did they get my contacts?
Seeking Direction
This happened to me as well 4 months ago and it is the gift that keeps on giving. Earlier this week I spammed my mom's news group!
saradarlin
Oh, and I have a 14 digit password with 2 factor identification and only log in on known clean systems... I am totally baffled.
saradarlin
If you haven't change your password. Also, you can change the name that shows up in the to part and see if it gets copied as an on going thing. For example mines says Mrs Alexia Sky change it to A. Sky. It could be you sent out a legit email to a compromised computer without other recipients BCC'd. And they got the addresses that way.
AlexiaSky
If you have an actual copy of the spammer's email, and the headers don't show that the messages originated from Gmail's servers, you've just been joe-jobbed, and there's really nothing you can do aside from telling people that someone else is spoofing your email address. I'm with adamrice on this one; it probably wasn't you that got hacked and got their contacts added to a spammer's database, but someone who knows a lot of the same people you do.
Aleyn
Did you check your https://support.google.com/mail/answer/45938?hl=en page? If I'm reading right, it'll show you if someone is accessing your account. Not seeing spam messages in the "sent" folder isn't a guarantee that the spam didn't come from your account. If a spammer has access to your account, they would most likely delete all/most traces of their activity in your account.
sarah_pdx
^ Last account activity was the first thing I checked; it showed absolutely nothing out of the ordinary.
Seeking Direction
Related Q & A:
- How do I export my contacts from Yahoo! into Gmail contacts?Best solution by Yahoo! Answers
- How to get my Gmail contacts to my Yahoo account?Best solution by support.google.com
- How do I export my contacts and email (yahoo) to an gmail account?Best solution by Yahoo! Answers
- How to add new contacts in Gmail?Best solution by Yahoo! Answers
- How can I stop spam which is sending to all contacts in address book?Best solution by Yahoo! Answers
Just Added Q & A:
- How many active mobile subscribers are there in China?Best solution by Quora
- How to find the right vacation?Best solution by bookit.com
- How To Make Your Own Primer?Best solution by thekrazycouponlady.com
- How do you get the domain & range?Best solution by ChaCha
- How do you open pop up blockers?Best solution by Yahoo! Answers
For every problem there is a solution! Proved by Solucija.
-
Got an issue and looking for advice?
-
Ask Solucija to search every corner of the Web for help.
-
Get workable solutions and helpful tips in a moment.
Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.