6 Replies Latest reply: Sep 21, 2010 7:10 AM by Lawrence Finch
Michael Westbourne Level 2 Level 2 (150 points)
I'm a complete novice when it comes to this stuff, so I don't know if this has any relation at all to the problem I'm having, but I'll just explain as much as a can.

I connected to my school's wifi with my iPhone to download some purchased music. It asked for my password to purchase the music. Before the download is complete, I have to leave, and instead of physically disconnecting from the wifi, I just leave the area, which I assume will eventually disconnect me when I get too far away. Since I'm disconnected from wifi, the download obviously is canceled (I assume I can pick it up later next time I connect to the wifi). But throughout the day, I keep getting the pop-up prompt to enter my password, which I assumed is because my phone is trying to restart the download and it needs my iTunes account password to do so. The first time this happened I gave my password without really thinking about it.

Anyway, later today I find out that a mass spam email has been sent from my Gmail account. So I'm trying to find the source of how they got my password, and I'm wondering if it's possible that this is because of what I was doing on my iPhone earlier. Could I have somehow gotten a virus or something on my iPhone? Or if it's something unrelated to the iPhone, and ideas of what I can/should do?

Thanks

3G, iOS 4
  • Lawrence Finch Level 7 Level 7 (32,280 points)
    If you were connected to a WiFi network anyone on the network could see your password (with proper software). It has nothing to do with your iPhone, unless it is jailbroken.

    Another possibility - did you check your gmail from any other computer on the network in the past few days? It doesn't have to be the same day your password was grabbed.

    Lesson #1 - NEVER use the same password for multiple accounts.
  • Michael Westbourne Level 2 Level 2 (150 points)
    I can't recall any time in recent memory when I've accessed my email from anywhere other than my home network or my phone. And I haven't made any warranty-voiding alterations to my phone.

    Besides changing my password, is there anything else I should do?
  • Allan Sampson Level 10 Level 10 (123,375 points)
    Is this mass spam email sent from your Gmail account available in the account's Sent mailbox?

    If not, all a spammer has to do is enter the email address for your Gmail account to appear as the sending email address. This alone does not mean your Gmail account has been compromised. Spammers either enter a bogus email address to appear as the sending email address or they use a valid email address from their known good email address list which they are constantly changing.
  • Michael Westbourne Level 2 Level 2 (150 points)
    Yeah, I checked and unfortunately they are in my sent box. There are three emails: "Hello0," "Hello6," and "Hello7." Each going to about a third of every single person I've ever emailed.
  • MonicaRT Level 1 Level 1 (0 points)
    The same thing happened to my iPhone today. Fortunately it only sent to one person but unfortunately it was my ex and the spam was for male enhancements. Since this happened I have had problems with my phone all day. Now my phone is saying restore needed on the screen but when I try to plug it in to my Mac iTunes tells me that my phone is locked and will not connect until I unlock my phone (my phone is not giving me a password screen)... anyway I am going to the Apple store tomorrow to get it fixed so I will ask this question tomorrow and let you know what they say.
  • Lawrence Finch Level 7 Level 7 (32,280 points)
    Definitely change your password. If you use your gmail email address for any other web sites change your password for those sites also, and make it different from your gmail password.

    If you log in to any web sites that are not secured by SSL (SSL sites always begin https:, non-secured sites begin http:) do not access them over public WiFi. Likewise for FTP sites that do not use SFTP.