john banks

My wife has an old yahoo account that she forwards to gmail. I received a spam email from it, or what appeared to be it as when I clicked the sender in gmail it said it was from her and showed it as from yahoo. In her account there is no sent email.

We changed her password to be sure. It went to other people that are in her address book (but not mine) from when she last used this email account.

How to investigate more? What is likely to be going on and what action should we take?

Springs

iTrader: (4)

Change the password is all you can really do short of closing the account.

If you don't use it, it might be worth clearing out the contacts so if they do get access to it they can't spam people.

Alternately they spoofed the email address to make it appear that it came from that address.

john banks

http://www.channel4.com/news/yahoos-...minal-spammers

Thanks. Also found the above.

When the email address is spoofed, it presumably needs the contents of your previous emails or address book to send to some of your contacts?

john banks

It also transpires that a minute before I received the email Yahoo sent an alert to say there had been a login from Russia with a valid password. Password has been changed and we'll just look at closing the account completely.

Puzzling how they got the password. After a previous fishing attack she is quite careful.