Random Messages in My Drafts Folder

This one has me a bit stumped...

Over the past week, there have been random emails showing up in my 'Drafts' folder that I did not create. All of the messages are the same. They have no subject, the body of the email is "Lorem. this is the body text", and there is a text file as an attachment. The attachment is titled "test.txt", it is 272 b and contains "this is the attachment text". As far as I can tell, these messages are never sent. They seem to be created at random times, and total about 20 in a given day. 

In Outlook, I have several accounts configured. These draft messages are present in both (all) of my Office 365 accounts, but not in my Google-based accounts. There are also messages with the same format at content in my 'Junk' folders. There are no from or to addresses on these message. 

Does anyone know how these messages might be created? I presume it is some kind of automated process since they are being created at random times day and night. Are there any forensic techniques that I might be able to use to figure out where the messages are coming from? 

Thanks in advance!

Hi DpDynamic,

Thank you for the posting in our forum community.

Regarding your description, may I please confirm that whether you have configured your Office 365 email account in multiple device or client for accessing emails on Outlook?

If so that, kindly disconnect all the devices or client and kindly try to test this issue with Outlook web client (OWA).

On the other hand, regarding your description about “random emails showing up in my 'Drafts' folder that I did not create”, kindly try to double confirm that if your Office 365 accounts are accessing by others and it can be known by searching Audit log result from Office 365 Security & Compliance Center . So, for knowing this result, kindly try to contact to your Office 365 admin of the organization, they can help you for searching this audit log result activity.

Also, for further analysis, I need to collect below information from your side.

1. Kindly save that draft message and provide us entire saved draft message via private message.

2. Kindly provide us detailed audit log result via private message.

Kindly provide us above details via this private message link: https://answers.microsoft.com/en-us/privatemessage/inbox. For your privacy, we will send you private message for collecting it.

Regards,
Darpan
* Beware of Scammers posting fake Support Numbers here.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi DpDynamic,

If you need any further help or information, kindly feel free to contact us and provide us above mentioned information as per your convenient time.

Regards,

Darpan

* Beware of Scammers posting fake Support Numbers here.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I have been having the same issue for about a month, in several mailboxes in my O365 account.  I have deleted all mail apps from my iPhone, and deleted all mail apps from my Mac.  I opened OWA and about an hour later, another one of these drafts appeared.  Sometimes they appear in my inbox as well.

I spoke to Microsoft about this several weeks ago and they couldn't figure it out.

I did a Message Trace on my mailbox in O365 Security and Compliance and they do not show up.  I have also confirmed that no one else has accessed my mailbox.  I have done extensive scans of my laptop and there does not appear to be any viruses or malware.

This is a huge concern.  How can a draft be created if there is no mail client installed??

4 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I have (had) the same issue. I am a macOS user and I was using the Spark email client.  I removed my O365 account from all instances of Spark, then I removed the app. I am now using the Outlook for Mac client and the Outlook for iOS client on my mobile devices. I have not seen this issue occur in 7 days.  I don't know if Spark was the culprit or not, but for now the issue is not occuring.

5 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi DuRand

I have the same issue (exactly) and am using a similar if not identical set up to you.

Spark Mail > O365 (multiple accounts in 365 and Gmail). MacOS and IOS devices with Spark installed as primary client.

Can I just ask - did you suspect Spark as the culprit - I get you don't want to blame someone without evidence, but was your view it is more likely given that you have removed Spark and now are using Outlook Mac? How are things after the last few weeks - still the same (fixed) or did it start up again?

As you might expect when I found this post (as it been happening for some time now), I was really interested in any thoughts you have to help short circuit my process to get a solution.

Many thanks.

Graham

3 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi Graham, 

Thanks for the nudge. I've been meaning to reply to this thread. 

I was using Spark on iOS and Android and removed the apps on both devices about two weeks ago. I am using Outlook on Mac and Windows and have not seen this issue since removing Spark. All clean. It is unfortunate that the culprit appears to be Spark - I think it is a great app. To give the developer an opportunity to improve, this should be reported as a bug. Or maybe it is not a bug and just an incorrect user setting. 

Hope this helps. 

-David

2 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hey Graham:

I had tried several things prior to removing Spark, then a co-worker sent me a link to this thread.  So, yeah - I was immediately suspicious of Spark after reading some of the posts here.  I've not seen any occurrences of this issue since removing Spark from all of my devices, and that was just over three weeks ago.  I am curious as to what would happen if I were to resume use of Spark, so I may re-install it. 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

My next step is to remove all accounts from Spark, delete all apps and test with Outlook Mac / iOS (Yuk - no ToDoist integration) and after a week add the accounts back in and retest with Spark - just to see if I can confirm its a Spark issue. I will update and thanks so much to all for the feedback it has literally saved me hours of effort feeling isolated with a unique problem.

Graham

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I tweeted Readdle about this and here's their answer. It's a known bug:

https://twitter.com/SparkMailApp/status/1223235081109721089?s=20

3 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated April 1, 2024 Views 10,333 Applies to: