One of my accounts also got hacked sunday, with a sent message directly from the account (msg in sent folder) to all in adressbook. The initial breach showed the login from a country I haven't visited using a yahoo partner app. I only log in to my account with the browser. Never used a yahoo app...