Spam? Infected Phone?

1

Hey guys, something really curios that I discovered:
image
I spoke with said person, checked said account, but I couldn’t find that many emails in the sent folder and the person also confirmed, that she didn’t send so many. She only has access to it via her phone. What do you think? Infected? I already changed her password and told her just to use the web portal for now …

Is there any way I could dig deeper and check some logs or something?

The second usage report after that was normal again.

And now it was like this again (strange again, 32 sent, but she said it is not possible and I didn’t find so many in the sent folder, just a couple):
image

2

Hi, I think the sent folder is managed by the sending app (eg Thunderbird, or the phone app). So not in sent folder is no guaranteed answer.

Have a look in /var/log/mail.log for lines containing “postfix/submission/smtpd”. Also /var/log/mail.log.* for older details.

1 Like