Google account hacked?

[axeman]

I got a message logging into gmail that my account had unusual activity and I needed to enter a verification code and reset my password. It looks like 6 hours ago someone from 81.170.234.99 was able to use my account to generate spam, and google locked the account. My question is, does anyone think it would be some sort of malware that compromised my password, or some bot managed to crack the password? Not that it was very secure, but I've used a stronger one now. Anyone heard of this? Malware bytes' scan comes up clean as does the AV on my main Windows machine, but I use a few others.

[squeeb]

Not sure but def enable two-step auth in google settings.

[cheapFreeAgent]

I remember having the same request from gmail few years back. But at that time someone was actually stalking me so I believed it was not malware and I changed all of my passwords of my other email accounts related to my gmail's.

edit:
ah yes and after that, spam mails keep attacking my gmail account. I don't know whether it was just coincidence or not.

[thegleek]

from 81.170.234.99 was able to use my account to generate spam

Interesting... It's a TOR exit router in Sweden... See: http://81.170.234.99/

MIKAEL SAHLSTRÖM (A engineering students portfolio)
COMPUTER SCIENCE STUDENT

Code: Select all

Born in 1987. Grew up outside of Malmö, Sweden, and is currently living in Lund. I am studying Computer Science at LTH and will be completing my Master's degree in 2013.

I first started with programming in Visual Basic 6 back in 2002 and later on picked up PHP, Javascript, Java and C (in that order). It was when taking some programming and electronics classes in highschool my interest for programming and computers really grew.

After highschool I was called up for military service and served as a radio-communications squad-leader. When I got back to Malmö I studied math, physics and chemistry at Malmö Högskola for one year and then Computer Science at LTH.

[axeman]

Bah, that's why it generates so many hits on google (the IP). Thanks, tor. In any case, I don't think someone was stalking me, because I was sending viagra spam or somesuch. The ip logging into google being a tor exit node is worrisome, though... that means it could be malware on one of my PCs for all I know. I scanned the daylights out of everything I could think of. Maybe someone somewhere is just trying bruteforce to hack into gmail accounts. My password wasn't a dictionary word - but only numbers and lowercase letters and not very long, so probably pretty easy to bruteforce. I'm still worried the password was compromised in other ways, like I happened to use the same password and email account on some forum account that had it's database compromised. I don't use the same password on everything, but I tend to use only a couple of them. Time TO CHANGE ALL THE PASSWORDS! *sigh*