I have seen this with a residential customer on AOL. Examination of the sent items folder messages showed that they were sent about 10 at a time from three machines - one in Poland, one in Greece and one in India. The client software sending the messages was the mobile version although the end user did not use any mobile device for email.
Changing the password to a strong one fixed it. No come back 6 weeks later.