Gmail spoofed? Sent emails I obviously didn't send.

inkbotdesign

Regular Member
Joined
Jul 21, 2014
Messages
297
Reaction score
157
Has anyone come across this? I checked my email yesterday and there was one received, all nonsense gibberish, no link was clicked, I deleted it. Then I got another.

I checked my 'sent' emails and apparently I had sent ones (which I didn't) - I changed my password and double-checked security - all good.

It's still happening, this was just in my sent folder to a random email:

"A grape is a lemon's deer. A peach sees an ant as an easygoing spider. Those raspberries are nothing more than plums. The fig is a turtle. However, they were lost without the pleasant blackberry that composed their fig. The amusing deer reveals itself as a quick-witted apple to those who look.

Rats are diligent prunes. Washing and polishing the car,a bird is a kumquat's kitten! Some posit the sympathetic melon to be less than amused. Few can name a gentle melon that isn't a discreet fish. A cow is a spider from the right perspective. They were lost without the lively snail that composed their chimpanzee! In ancient times those pigs are nothing more than spiders."

Has anyone seen this - I've no idea how to fix it.
 
Have you authorized a third-party app?

Please visit https://myaccount.google.com/security?pli=1 - scroll down to the "Manage third-party access" section and take a look at the apps. Remove all that you don't recognize.
 
Thanks, I did that and the only thing that has access is my email software "mailbird" that I use every day.

Who are these sent emails addressed to? Also, this looks like a compromise of some kind.

The above gibberish is clearly auto-generated test content of some kind.

Just to be safe, can you run a complete scan of your PC and Mobile?

Also, check the access logs by logging into Gmail on your web browser and clicking on "Details" in the bottom right.
 
Has anyone come across this? I checked my email yesterday and there was one received, all nonsense gibberish, no link was clicked, I deleted it. Then I got another.

I checked my 'sent' emails and apparently I had sent ones (which I didn't) - I changed my password and double-checked security - all good.

It's still happening, this was just in my sent folder to a random email:



Has anyone seen this - I've no idea how to fix it.

First thing is to turn on 2fa. Use your phone number not any app to do this.


Have you authorized a third-party app?

Please visit https://myaccount.google.com/security?pli=1 - scroll down to the "Manage third-party access" section and take a look at the apps. Remove all that you don't recognize.

I think the email has been compromized
 
What type of emails were sent ? There will be links in those emails which belong to the hacker.
 
"A grape is a lemon's deer. A peach sees an ant as an easygoing spider. Those raspberries are nothing more than plums. The fig is a turtle. However, they were lost without the pleasant blackberry that composed their fig. The amusing deer reveals itself as a quick-witted apple to those who look.

Rats are diligent prunes. Washing and polishing the car,a bird is a kumquat's kitten! Some posit the sympathetic melon to be less than amused. Few can name a gentle melon that isn't a discreet fish. A cow is a spider from the right perspective. They were lost without the lively snail that composed their chimpanzee! In ancient times those pigs are nothing more than spiders."
I’m getting cicada 3301 vibes from this lol
 
I Googled a random part of the sent email "Washing and polishing the car,a bird" and came across a site with the same text: https://fijitheartist.com/index.php seems just be a spam page for link building.

Doesn't really help with what OP is asking but thought it was interesting.
 
I’m getting cicada 3301 vibes from this lol

Same here. I could find similar strings elsewhere. But nothing made sense.

I Googled a random part of the sent email "Washing and polishing the car,a bird" and came across a site with the same text: https://fijitheartist.com/index.php seems just be a spam page for link building.

Doesn't really help with what OP is asking but thought it was interesting.

I found that site too.

I also found

https://shalomapps.com/index.phphttps://www.studocu.com/row/document/university-of-nairobi/english/doc1-eng-101/14925879https://studylib.net/doc/25543384/doc1
Seems like a random text generator of some sort.

But it being in the OPs Sent box is weird.

As @The Seer pointed out, please turn on 2FA OP.
 
If you are unable to find any explanation and your account is indeed secure, it can be that those emails are simply miscategorized and they're incoming emails, which should be put into Spam/Inbox normally. Spoofing the address is not really hard to do. Those emails might be put to the sent folder, because the sender email is spoofed to be yours. Probably Mailbird has something to do with it depending on the access, settings it has, i'm not familiar with it.
 
maybe your got some virus on your system and the virus auto send the emails
 
Everything will be clear if you click on show original message and copy paste to some online notepads and share that link here...
 
Thanks for the suggestions, 2FA has been on, virus scan came up clean. @HoNeYBiRD might be right, I'm still unsure, but no messages have been sent today at least from my email. There's a couple received. One pasted below (the emails 'sent' are to ones I don't recognise as clients or anything and there are ZERO links in them that would suggest a phishing attack)

From: [email protected]
To: [email protected]
Subject: Nowhere is it disputed that few can name an instinctive kumquat a | [IWE]
Message-ID: <[email protected]>
Date: Wed, 16 Feb 2022 17:11:36 +0000
MIME-Version: 1.0

----_NmP-360443948643bc8d-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

A passionate cheetah without monkeys is truly a elephant of easygoing hamst=
ers! The orange of a pineapple becomes a fair-minded sheep? The tiger of a =
peach becomes a delightful goldfish. Authors often misinterpret the tiger a=
s a loyal bee, when in actuality it feels more like a charming grape.

The first communicative blackberry is, in its own way, a kumquat. The grape=
s is a fig! Witty zebras show us how chickens can be peaches. Some posit th=
e excited peach to be less than energetic. The pig is a prune. A nectarine =
is the peach of a pineapple. A frog sees a fish as a mature bird;
----_NmP-360443948643bc8d-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
<div style=3D"min-width: 360px"></div>
<div dir=3D"ltr">
<div>
<div style=3D"box-sizing: border-box;"><p>A passionate cheetah =
without monkeys is truly a elephant of easygoing hamsters! The orange of a =
pineapple becomes a fair-minded sheep? The tiger of a peach becomes a delig=
htful goldfish. Authors often misinterpret the tiger as a loyal bee, when i=
n actuality it feels more like a charming grape.</p><p>The first communicat=
ive blackberry is, in its own way, a kumquat. The grapes is a fig! Witty ze=
bras show us how chickens can be peaches. Some posit the excited peach to b=
e less than energetic. The pig is a prune. A nectarine is the peach of a pi=
neapple. A frog sees a fish as a mature bird;</p></div>
</div>
<br>
</div>
<img src=3D"https://track.wakeleads.com/t/wmup/916003">
</html>
----_NmP-360443948643bc8d-Part_1--
 
Maybe you really don't want to share complete message cause that is not whole thing. its edited
its fine your all good now since you activated all shields ..

Good luck ;)
 
Maybe you really don't want to share complete message cause that is not whole thing. its edited
its fine your all good now since you activated all shields ..

Good luck ;)
I just copied and pasted directly from gmail>?
 
UPDATE: I worked it out.

It was a tool I use for cold outreach doing 'email warmup' - I didn't know it did that, and it's now disabled.

Thanks for the help, it was just my dumb ignorance.
 
UPDATE: I worked it out.

It was a tool I use for cold outreach doing 'email warmup' - I didn't know it did that, and it's now disabled.

Thanks for the help, it was just my dumb ignorance.

Cheers to see that you got it fixed.

Good luck.
 
Back
Top