Personal computing discussed

Moderators: askfranklin, renee, emkubed, Captain Ned

 
Turiel
Gerbil
Topic Author
Posts: 53
Joined: Wed Jan 12, 2011 7:11 pm

Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 9:11 am

So I recently got an alert from gmail saying that my account was accessed by United States (KS) (thriveverify.com:64.186.146.35) from an "unknown" access type. I checked thriveverify.com and it seems to be some sort of website that finds people for you. I changed my password just in case (along with pretty much my password for all the other websites I regularly visit) but how much should I be worried right now? I'm not sure how to respond since it seems to be a website and not an individual that's accessed my account. My previous password was complicated enough (by complicated I mean something like fj2n32ojtgw0 and not th1s1smyp4$$w0rd) so I have no idea how anyone could've gotten it in the first place. -_-;;;;
 
thegleek
Darth Gerbil
Posts: 7460
Joined: Tue Jun 10, 2003 11:06 am
Location: Detroit, MI
Contact:

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 10:13 am

I would be extremely careful with that. That warning email from gmail might be a spoof itself (check the email headers, etc...) - and do NOT click on any links they may provide! It could be a scam into getting access to your account!
 
Turiel
Gerbil
Topic Author
Posts: 53
Joined: Wed Jan 12, 2011 7:11 pm

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 10:19 am

It wasn't an e-mail (I wouldn't fall for that!!) it was a warning message that pops up directly from gmail and you can see the details by clicking "Details" located in the bottom right of any gmail page. ALL of the IPs listed on the list is my home PC except for that one, which was highlighted in red. I feel a lot more comfortable now that I've changed pretty much all the passwords for important sites but I wanted reassurance from someone who was a lot more savvy at this kind of stuff than I. It's my first time getting this kind of message so I'm more or less a virgin in these kinds of problems. >.<
 
thegleek
Darth Gerbil
Posts: 7460
Joined: Tue Jun 10, 2003 11:06 am
Location: Detroit, MI
Contact:

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 10:20 am

Yeah good find. I've never encountered any warning message of that sort from gmail.
 
SecretSquirrel
Minister of Gerbil Affairs
Posts: 2726
Joined: Tue Jan 01, 2002 7:00 pm
Location: North DFW suburb...
Contact:

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 1:11 pm

You get those messages when someone attempts to access your account unsuccessfully a number of times. I have triggered it on myself when I kept mis-typing the password. Probably nothing to worry about, but changing your password is good. Watch for any bounced messages and if you start getting thing, then it is possible someone actually did access your account.

I had it happen on my yahoo mail account. Once they have access to your account, they use it to send a whole bunch of outbound spam via the (now authenticated) SMTP relay.

--SS
 
Washer
Gerbil First Class
Posts: 110
Joined: Wed Feb 01, 2012 3:41 pm

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 1:42 pm

I had a friend who had a similar message with the IP coming out of China. You need to verify that your computer is clean. Chances of you being "hacked" are slim to none, chances of you have some malicious software on your computer looking for passwords is what I'd check for.
 
dmjifn
Gerbil First Class
Posts: 103
Joined: Thu May 15, 2003 4:21 pm
Location: Indianapolis

Re: Need some advice on gmail account (hacked?)

Sat Feb 04, 2012 2:16 pm

If you're really worried about it, you can turn on 2-step verification in gmail (actually your google account).
When you access gmail from a new device, they will text you a six digit number which you have to enter in addition to your password. This expires about every month or so. You can also receive from other mobile devices or a landline, or pregenerate some codes you can save to your PC.

I've been doing this for about a year and it's been fine. Then again, I only access from 3 devices.
 
fedor57
Gerbil In Training
Posts: 1
Joined: Mon Feb 06, 2012 5:28 am

Re: Need some advice on gmail account (hacked?)

Mon Feb 06, 2012 5:32 am

I am from Russia, the same IP United States (thriveverify.com:64.186.146.35) has accessed my account by Feb, 4. I wonder if it was successful login or just trying different passwords. Let me know about any your findings. My e-mail is fedor57 (at) ... .com
 
chuckula
Minister of Gerbil Affairs
Posts: 2109
Joined: Wed Jan 23, 2008 9:18 pm
Location: Probably where I don't belong.

Re: Need some advice on gmail account (hacked?)

Mon Feb 06, 2012 8:33 am

One other thing: Just to be extra careful, update or obfuscate your forgotten password question answers (e.g. those annoying questions like "Where did you go to school" etc.). There have been cases where attackers hacked email accounts not by actually guessing the password, but by doing research on the victim to figure out the answer to the forgotten password questions and then hijacking the account by changing the password.
4770K @ 4.7 GHz; 32GB DDR3-2133; Officially RX-560... that's right AMD you shills!; 512GB 840 Pro (2x); Fractal Define XL-R2; NZXT Kraken-X60
--Many thanks to the TR Forum for advice in getting it built.
 
njenabnit
Gerbil Elite
Posts: 644
Joined: Mon Sep 13, 2004 5:33 pm
Location: Oklahoma City, OK
Contact:

Re: Need some advice on gmail account (hacked?)

Mon Feb 06, 2012 8:50 am

Also, keep in mind that if you have given services access to your gmail inbox, it may show up on that list.

One example of this is on linkedin. They put a log in box for your gmail account right on the main page to browse through your contact list and find any matches for user emails that they have to try and link you up. They put it right in the middle of the main page, so if you are not careful it is easy to think "Oh a login box. I must not be logged in". It is especially tricky if you use the same password on both since you may think you are logging into your linked in account and actually be checking into gmail.
Image

Who is online

Users browsing this forum: No registered users and 1 guest
GZIP: On