Spam is coming from me. How?

Question

In contact with

I didn’t enter my login / password anywhere, I checked the computer with an antivirus (yes, I didn’t run anything suspicious for a long time), the hosts are in order, I didn’t follow the links from inside the contact.
At the same time, spam is coming from me, I accidentally saw it when I went to the sent ones.
What I did: I logged in, deleted all applications - it seems to have stopped spamming.
That's interesting, how can this beat, so as not to become a spammer again?

Answer 1

vkontakte.ru/settings
almost at the very bottom: "Security of your page" -> "View activity history".
If you find suspicious logins: your password has been stolen.

Answer 2

Usually it's the fault of the application "Download video and music from contact".
It seems that even on Habré recently there was an article about one such application.
PS: Carefully look at the allowed actions for the application.

Answer 3

It is likely that one of the application developers uses the vulnerability he found and a special application to stupidly make money on spam, and not report it to everyone. There was an article that in his best years, one guy was making a million a month from spam. After all, the application asks about the actions that you want to allow it to do. Perhaps there is a vulnerability with privileges and, allowing, for example, to read personal data, you also give the opportunity to send messages on your behalf through the vulnerability. No one will break contact for the sake of fun, if you can rise on this.

Answer 4

We went to the site vasjapupkin.ru, there is an iframe with a trojan, opening PDF in the browser is not disabled, but the plugin is installed. So we got ourselves a Trojan. And the fact that his antivirus did not find it is just nothing strange. And to intercept the input data and send it to the right place - you don’t need a lot of mind.

Answer 5

Oh my, I was also scammed, I had to change passwords. They need to do something about safety.

Answer 6

Did you look in the settings - there are IPs from which you logged into your account? In theory, you should know the basic recommendations - complex passwords, and so on.

Answer 7

Alternatively, you can install static DNS - 8.8.8.8. Read more: When the antivirus is powerless habrahabr.ru/blogs/virus/121203/

Answer 8

Have you ever used public Wi-Fi anywhere? At some conference, or, say, a cafe / restaurant, other places?

Answer 9

Today the same trouble happened
pix.am/RYiv/
I go to the activity history
pix.am/PAqh/
on the phone there is an official VKontakte application (from the market) at 5 in the morning I slept at home, respectively wifi was home, closed. The password for the account is complex (15 characters in different registers)
, the application immediately deleted