Compromised Gmail Account

[Constance]

If any of you, my fellow board-mates, use Gmail, beware.

Upon logging in this morning, I noticed a Spam message in my inbox that apparently originated from my own Gmail account. I used the "Report Spam" button on it of course. It was after that that I noticed my contacts list was empty.

Another Gmail user reported something similar in the Gmail support forum.

I don't know if any of you also use Gmail, but I thought I should pass this along just in case.

[finewine]

If it's from your gmail address but the mailhop headers show it originated from a non-gmail IP, then someone's just faked your mail address.  That's the most common method, make spam look like it came from some random but legit address so complaints and bounces go to them.

If the headers show it originated from Google mail servers then yes, your account was compromised.   Chances are it's the former but worth checking the latter.

[Janet_Girl]

I also received it, but reported it as Spam.  So far nothing has happened, but thanks for the alert, Shades.

Janet

[Flan]

nothing interesting here (spam or otherwise)  in my gmail account

[Constance]

The other user on the Gmail support forum indicated they didn't report any spam, but still their contact list was empty this morning though it was full last night.

Strange.
Post Merge: August 05, 2009, 11:01:01 AM
A more in-depth search of the Gmail support forums revealed several threads on this issue. It seems to be a recent thing affecting many Gmail users. And, not all of them mentioned the spam message.

Seems like a DB issue at Gmail, perhaps.

[Jay]

Thank you letting us know!

Jay

[Constance]

My son said his account is fine. He got the spam from my account, but his contact list is intact.

[Ellieka]

Just out of curiosity... are you using Google web mail or a desktop mail client like Evolution or Outlook?

[Constance]

I access Gmail through mail.google.com; their web mail client. I've never used a desktop client for my Gmail stuff.

[Janet_Girl]

Me also

[Valerie Elizabeth]

If you access Gmail through your web browser, you should make sure that it is encrypted.

It's in the settings, something along the lines of "always use secure" or somehing like that.