Yahoo Mail Spoofing Problem

For a while now I've been receiving the occasional message in my inbox that Yahoo Mail was 'unable to deliver my message' to a particular Yahoo Group that I'm a member of.

The thing is, I haven't been sending messages to that group, and upon looking at the content of the message that I've supposedly tried to post there, it's clear that it's simply a spam link to some dodgy website.

I haven't really been too bothered about this up until now, partly because I just assumed it was someone 'spoofing' my email address and there was nothing much I could do about it, and also because the email address of mine that they're trying to use is different from the one I use in the group, so none of the messages get through anyway.

Today however, I opened up Yahoo Mail to find a saved 'draft' message in my account that I don't remember writing. Upon opening it, I found it to be the same kind of spam message that I mentioned previously, presumably ready to be fired off to my poor group again.

So my question is this: does this mean that my account has definitely been compromised - bearing in mind that these feeble spamming attempts on my behalf are the only discrepancies that I've noticed - or could someone save a draft of an email in my Yahoo Mail account by spoofing my email address, without actually ever having my password?

 

change the password to start with and see how it goes. Should be better