Tell me more ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.
up vote 0 down vote favorite

Something sent a spam message from my gmail account to all the contacts in my google account.

Since I had changed the password for that account 5 days ago, and used that new password exclusively from my Ubuntu box and my Android phone, I am asking this here (I never rooted my phone or installed anything outside of the android market. Nothing besides android and stackexchange is connected to my google account).

How could this happen? I am dumbfounded. I scanned the system with both clamav and chkrootkit, finding nothing. I use Thunderbird or chromium to access my gmail account, and afaik no other software ever asked me for my google password.

share|improve this question
2  
Many many many Android apps can scan and copy all your contacts, it was in the permissions page you clicked "Agree" without reading. – mfisch Dec 25 '12 at 21:30
But they do not have access to your gmail account - the messages were sent from there and show up in my sent folder. – dgirardi Dec 25 '12 at 21:49
When you reset your password, did you also check that your account recovery settings were correct and unchanged? Work through Google's GMail security checklist first thing. – Tom Brossman Dec 25 '12 at 23:48

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.