A few days ago I received a Notification from my Android saying that it could not send mail because an attachment was too large.
I opened my Gmail App and found 5 messages in the Sent Mail folder that I had not sent.
The messages were all to people in my address book. Some had two year old timestamps. Most were empty with no subject or message. One had a large MP4 attachment which I deleted.
One of the messages looked like this:
date: 2014/09/30,12:37:00 to: firstname.lastname@example.org subject: Try this message: Maybe it needs message text
I ran Symantec Mobile Security, and it found no problems. I also scanned with Avast and with Dr. Web and found no problems.
My phone is not rooted. Nothing else looks suspicious about my phone: it runs fast -- no weird data usage. There are no strange apps installed, and nothing has been installed recently on the device.
Do I need to wipe my phone?
Is there some other check I can run on my Android to see if I've been pwned?