Google is currently dealing with one of the more bizarre cases of email spam we've seen. Gmail users with completely secure accounts are discovering spam messages in their sent folders. They didn't send these emails and have no idea how they got there.
As Mashable reports, the emails listed in the sent folder are your typical spam messages offering loans, weight loss solutions, and growth supplements for men. The discovery of the emails led some users to change their Gmail account passwords. But others confirmed two-factor authorization was still active and working on their account, so they turned to Google's Help Forum.
It turns out Gmail users have nothing to worry about and their accounts remain secure. Google explained that this is indeed a spam campaign, but the messages appearing in sent folders were never sent from the accounts. In a statement, Google explained that, "This attempt involved forged email headers that made it appear as if users were receiving emails from themselves, which also led to those messages erroneously appearing in the Sent folder."
Each email looks as though it was sent to around 10 recipients, none of which are known to affected users. Many of the messages are also being sent via telus.com, but the Canadian telecom company confirmed none of the messages are being generated by Telus or sent via Telus' servers.
Google insists only a small subset of users are affected, and it is working to ensure all the rogue emails are reclassified as spam.