Live data from Hacker News

My account is sending spam emails

productforums.google.com

81–90 of 154 posts

Re: My account is sending spam emails

#82
post #58

Just wanted to say, the top response on the google forum is exactly why google needs real support and not community members copy-pasting “solutions”.

Stories like this make me glad I use an email service which values me enough to have real humans who actually work there answer my support requests.

Re: My account is sending spam emails

#83

Exact same thing for me. Noticed I was getting emails being sent from myself. More worringly was the emails appeared in my SENT folder. For 5mins I was freaking out thinking I was hacked, because I didnt think spoofing emails would show up in MY "sent" folder. But I run 2FA, long complex unique password etc. I treat OpSec really highly. I checked all Google security settings, no unauthorised access, no apps using my…

Here is a raw header for people smarter than me (I've changed my email to "my.email.fake@gmail.com": Delivered-To: my.email.fake@gmail.com Received: by 2002:a02:9d5d:0:0:0:0:0 with SMTP id m29-v6csp2463224jal; Sat, 21 Apr 2018 22:54:19 -0700 (PDT) X-Google-Smtp-Source: AB8JxZqeE/hqXWlPnOWNRXo4XX3nwZh/+NGaQwquAFr/o2KzBe7Ub8QYDmcPIiZPkY2UoHRI3eOH X-Received: by 2002:a19:c457:: with SMTP id u84-v6mr6519818lff.109.152437…

It’s clearly failing DMARC there. Very odd.

Re: My account is sending spam emails

#84

Earlier quoted context omitted.

Yeah, this looks pretty straightforward. As I read it, it looks like telus.com has set up SPF records allowing people to send mail as @gmail.com via Telus' servers. That's fine. These messages are being sent with a "reply@telus.com" return address (the "envelope from"), but they are coming from gown.shoppingbrew.com and rine.play-wto.com (I don't get why there are separate received headers here from different sources…

Gmail's sent folder isn't a sent folder in the traditional sense. It's a label that just filters mails based on the "from" address.

Are you sure about that? I have gotten many spoofed spam emails before but I've never seen them appear in my sent folder before. Furthermore when I search "from:[my email]", I see a different listing than when I look in the sent folder.

Re: My account is sending spam emails

#85
post #77

Earlier quoted context omitted.

Gmail's sent folder isn't a sent folder in the traditional sense. It's a label that just filters mails based on the "from" address.

That's a bug. Does anyone disagree?

I disagree because your sent mail also appears in your inbox and vice versa as part of threads.

Re: My account is sending spam emails

#86
Most people don't realize some services you "Logged into with Google" can also send emails in your name. I didn't come across anyone checking authorized apps in that thread. While this appears to be a spoofing issue, I suggest pruning the list of authorized apps frequently: https://support.google.com/accounts/answer/3466521?hl=en

Re: My account is sending spam emails

#87

Earlier quoted context omitted.

You could make a filter like this: The email is spam if FROM and TO address = my.email.fake@gmail.com AND Return-Path is not = my.email.fake@gmail.com So you could still send emails to your self and they would not get flagged as spam.

The thing is I've used Gmail for nearly 10 years (give or take) - and I've never once had a spoofed email reach my inbox. Ever. Something must have changed, most likely in the past 24 hours (give or take) to allow this to suddenly occur? Or someone's worked out a way passed the gmail spam filters or something. Either way - this is clearly "new".

I’ve used Gmail for longer and I’ve seen it a lot over the years. What’s most likely changed is the volume at which the spammers are doing it, so you finally started seeing some come your way.

Re: My account is sending spam emails

#88
post #77

Earlier quoted context omitted.

Gmail's sent folder isn't a sent folder in the traditional sense. It's a label that just filters mails based on the "from" address.

That's a bug. Does anyone disagree?

It's non-standard, for sure, but it's "by design" and I suppose they can do whatever they want on their own platform. I'll stick with my IMAP4-compliant mail server, though.

Re: My account is sending spam emails

#90
post #58

Just wanted to say, the top response on the google forum is exactly why google needs real support and not community members copy-pasting “solutions”.

Stories like this make me glad I use an email service which values me enough to have real humans who actually work there answer my support requests.

What do you use as your email service?
Post reply on HN