Gmail account sends spam to internal addresses once a day
A user's gmail account in our Gsuite sends a spam message at the same time every day.
At 8:20am every morning an email is sent from the account to eight internal users @mydomain.com
The body of the message is empty and the title is 'jknkljn'.
I initially thought it was spoofing but I have SPF, DKIM and DMARC entries in my DNS. The emails also appear in Gmail 'Sent'.
I have change passwords and 2 step verification enabled.
And anti-virus scanned both clients.
Any help would be greatly appreciated?
At 8:20am every morning an email is sent from the account to eight internal users @mydomain.com
The body of the message is empty and the title is 'jknkljn'.
I initially thought it was spoofing but I have SPF, DKIM and DMARC entries in my DNS. The emails also appear in Gmail 'Sent'.
I have change passwords and 2 step verification enabled.
And anti-virus scanned both clients.
Any help would be greatly appreciated?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for all suggestions.
Turns out disconnecting all devices and stopping connected services did the trick.
I didn't have time to check which one device or service was the actual cause. If it raises it's ugly head I will spend more time.
David, I would love to know more about email headers and how to debug them. Do you have any links or info?
Thanks again for all your help.
Mat
Turns out disconnecting all devices and stopping connected services did the trick.
I didn't have time to check which one device or service was the actual cause. If it raises it's ugly head I will spend more time.
David, I would love to know more about email headers and how to debug them. Do you have any links or info?
Thanks again for all your help.
Mat
You asked, "I would love to know more about email headers and how to debug them. Do you have any links or info?"
Without seeing an exact message, no guess where you might begin.
Maybe just search for - debug spam headers - then start reading every article.
Focus on Received:, From:, SPF/DKIM analysis headers.
Without seeing an exact message, no guess where you might begin.
Maybe just search for - debug spam headers - then start reading every article.
Focus on Received:, From:, SPF/DKIM analysis headers.
ASKER
Will work through them all today..
many thanks again..