[bdfh42]

How do you know "they" are using your account rather than just using your email address as a "from". That used to be the most common way of trying to get SPAM past people's simpler filters.

Might be worth checking what would happen if such an email was rejected from one of those email servers that bothers to send a response back - could explain it all.

[fiendsan]

Yeah most likely someone got a hold of your address book and is just spamming your friends, unfortunately dont neet to hack your gmail todo that (there are a tons of ways of getting your address book).

I would say to check the header of your spam e-mail on your friends mail box and see where the e-mail came from, if it was from google you might have some issue (maybe you gave some app or service access to your gmail, or have pop/imap enabled), if its not from gmail then dont stress about it, sooner or later the spam filters will pick up that its not from you ^_^ .oO( yeah dont hold your breath on google helping you on this, they really dont have any support! )

[codingfounder]

The header does suggest it came from google.

I also suspected it may be some app or service that I gave access to my contacts to, but I didn't see any in my app access list.

How does one get hold of the address book without hacking into the account or via a third party app that has access?

[bdfh42]

You will probably be amazed at the number of web sites and phone apps that have had access to your contact list - just to get something done. Easy to forget when and when.

Could even be that it was someone you know who has your email address who gave their contact list to this spammer (directly or indirectly). The bad guys could then have simply picked one email address as the from and got to it spamming the rest.

[fjarlq]

Post the headers (after scratching out the email usernames)... there may be clues lurking.

[codingfounder]

I'm trying not to leak any more personal info, so I'm not sure which parts of the message I can post publicly.