<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">it's unlikely that it was malware on your machine. It is, however, far more likely that someone used your email as a return envelope and tried to spam dozens of others. what you saw was more than likely a return from a bogus address.<div><br></div><div>-eric</div><div>from the central office of the Technomage Guild</div><div><br><div><div>On Jan 29, 2017, at 9:45 AM, Mark Phillips wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr"><div><div><div>I found the Mail Deliver Subsytem notification (see below) in my Gmail inbox this morning. Has my account been hacked?<br><br></div>The message says an email from my
account could not be delivered because the destination address was
incorrect. The email message that bounced was in Italian and looks like spam (based on
my limited Italian). I never sent the message and I don't write enough
Italian to be able to spam anyone in that language.<br><br></div><div>I
only access this Gmail account with a browser from (1) my Ubuntu 14.04
machine or with the Gmail app on my Android phone and tablet. Any
suggestions on how to find any malware on my Ubuntu machine or my
Android machines that could have sent this message?<br><br></div>Thanks!<br><br></div>Mark<br><div>==============================================================<br></div><div>The suspicious message:<br></div><div><br><span style="font-family:monospace,monospace">Phillips Marketing, Inc. Mail Mark Phillips <<a href="mailto:mark@phillipsmarketing.biz">mark@phillipsmarketing.biz</a>><br>Delivery Status Notification (Failure)<br>Mail Delivery Subsystem <<a href="mailto:mailer-daemon@googlemail.com">mailer-daemon@googlemail.com</a>> Sun, Jan 29, 2017 at 12:51 AM<br>To: <a href="mailto:mark@phillipsmarketing.biz">mark@phillipsmarketing.biz</a><br>Error Icon<br>Address not found<br>Your message wasn't delivered to <a href="mailto:hlrecherche@auchan.it">hlrecherche@auchan.it</a> because the address couldn't be found. Check for typos or unnecessary spaces and try again.<br><br>Final-Recipient: rfc822; <a href="mailto:hlrecherche@auchan.it">hlrecherche@auchan.it</a><br>Action: failed<br>Status: 5.0.0<br>Last-Attempt-Date: Sat, 28 Jan 2017 23:51:21 -0800 (PST)<br><br><br>---------- Forwarded message ----------<br>From: <<a href="mailto:mark@phillipsmarketing.biz">mark@phillipsmarketing.biz</a>><br>To: <<a href="mailto:hlrecherche@auchan.it">hlrecherche@auchan.it</a>><br>Cc: <br>Date: 29 Jan 2017 13:16:17 +0200<br>Subject: Guadagni extra per voi! 700-1000 euros alla settimana.<br>Caro hlrecherche,<br><br>Io sono HR manager di una grande compagnia internazionale.<br>La nostra azienda è alla ricerca di collaboratori intraprendenti.<br><br>Il stipendio possibile da 2500 a 5000 euro al mese.<br><br>Se Le interessa nostra offerta - si prega di visitare il<br>Nostro Sito<br><br>Con i migliori saluti,<br>HR Manager<br>Ufficio Internazionale<br></span><br></div></div>
---------------------------------------------------<br>PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>To subscribe, unsubscribe, or to change your mail settings:<br><a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a></blockquote></div><br></div></body></html>