Something sent a spam message from my gmail account to all the contacts in my google account.
Since I had changed the password for that account 5 days ago, and used that new password exclusively from my Ubuntu box and my Android phone, I am asking this here (I never rooted my phone or installed anything outside of the android market. Nothing besides android and stackexchange is connected to my google account).
How could this happen? I am dumbfounded. I scanned the system with both clamav and chkrootkit, finding nothing. I use Thunderbird or chromium to access my gmail account, and afaik no other software ever asked me for my google password.