The emails arriving in the inbox appear as if they are being sent by the user with a Me marked in the inbox along with the profile icon of the Gmail user on mobile.
However, as of now, it hasn't been figured out what is causing this issue and whether it extends to a larger number of users. My email account has sent out three spam emails in the past hour to a list of about 10 addresses that I dont recognize.
This Sunday morning wasn't so pretty for most of the Gmail users. At least some of these accounts had two-factor authentication enabled, and despite changing passwords, users found that the spamming continued.
Gmail users were in for a shock on 22 April after finding out that they have sent spam messages to random addresses from their own account. "I changed my password immediately after the first one, but then it happened again 2 more times". Apart from this, some Gmail users on the forum reported that the spam mails were being sent via Canadian telecommunication company Telus.
"The subject of the emails is weight loss and growth supplements for men advertisements". And because of that, it was placed in users' Sent folders and not being flagged as spam.
Google seems to be aware of the issue and a company spokesperson told Mashable that Google has "actively taken measures to protect against it". If you happen to notice a suspicious email, we encourage you to report it as spam. This attempt involved forged email headers that made it appear as if users were receiving emails from themselves, which also led to those messages erroneously appearing in the Sent folder.
Fortunately, Google knows about the problem and said it was "spam campaign impacting a small subset of Gmail users". Telus also released a statement saying that it has investigated the matter and confirms that there were no emails being sent from or through its servers.
The new variant makes it appear as if you are sending the spam email to yourself.
Google said it has identified and is reclassifying all offending emails as spam, and has no reason to believe any accounts were compromised.