Ping: FrogMan

[terpkristin]

I think you either got hacked or have a virus or something. I (and from the looks of it, a bunch of other people, too) got an email from you this morning with bad grammar and typos that appeared to be an ad for discount electronics.

Just thought you might want to know..

/tk

[Alan T]

I think you either got hacked or have a virus or something. I (and from the looks of it, a bunch of other people, too) got an email from you this morning with bad grammar and typos that appeared to be an ad for discount electronics.

Just thought you might want to know..

/tk


Yeah, I sent him a PM earlier on this as well.

[terpkristin]

Ah, just got an email from him, he knows. I figured I'd tell him in a variety of places in case he was locked out of his email hahaha.

/tk

[FrogMan]

thanks guys, yeah, went into a mini panic attack this morning when I saw that, as I don't have access to gmail at work... A coworker of mine allowed me to go to his hous (I live 25 minutes from work) and indeed, there was a one time hit from a Chinese IP address to my Gmail account. Oddly enough, my google account password had not be changed and neither were my password recovery options. I changed my password and told gmail to log off any other session currently logged in, if there were any.

Thanks again for reporting it and sorry about that everyone.

FM

[DaddyTorgo]

thanks guys, yeah, went into a mini panic attack this morning when I saw that, as I don't have access to gmail at work... A coworker of mine allowed me to go to his hous (I live 25 minutes from work) and indeed, there was a one time hit from a Chinese IP address to my Gmail account. Oddly enough, my google account password had not be changed and neither were my password recovery options. I changed my password and told gmail to log off any other session currently logged in, if there were any.

Thanks again for reporting it and sorry about that everyone.

FM

Happened to me too a lil while back I think. I forget what it was that tipped me off, but same thing...my password wasn't changed and neither were my recovery options.

[FrogMan]

Happened to me too a lil while back I think. I forget what it was that tipped me off, but same thing...my password wasn't changed and neither were my recovery options.

and have you been okay since thene? I mean no more sending off your gmail account?

When I looked into my sent emails, there were a bunch of "hello1" to "hello9" messages that had been sent...

FM

[DaddyTorgo]

and have you been okay since thene? I mean no more sending off your gmail account?

When I looked into my sent emails, there were a bunch of "hello1" to "hello9" messages that had been sent...

FM

Yeah. I've been okay since then.

fuckin chinese.

between this type of shit and killing tigers and all sorts of other endangered animals for their wacky folk-medicine, and polluting up a storm, i'm fucking sick of them as a country.

Oh I remember what it was - I went to login and it was like "gmail has detected that your account has recently been used for spam" or something like that.

[Alan T]

thanks guys, yeah, went into a mini panic attack this morning when I saw that, as I don't have access to gmail at work... A coworker of mine allowed me to go to his hous (I live 25 minutes from work) and indeed, there was a one time hit from a Chinese IP address to my Gmail account. Oddly enough, my google account password had not be changed and neither were my password recovery options. I changed my password and told gmail to log off any other session currently logged in, if there were any.

Thanks again for reporting it and sorry about that everyone.

FM


From the details link, was it a Chinese IP access through gmail's mobile interface, or did it say browser?

[Alan T]

Common ways accounts are hijacked for this type of thing:

1) Using a simple password, especially one that is a dictionary word or proper name.

2) Using password retrieval questions that are easily answerable through social engineering. (ie: if your facebook account is very public and has all of the information in it that is needed to answer the questions gmail requires to reset your password... such as first child's name, pet's name, etc).

3) Using the same password as other sites that might have been compromised.

4) Using a web browser that is not secured (ie: you don't disable scripts, you don't disable iframes, you don't disable javascript, you don't use a protection like firefox noscript add-on, etc) and then hitting a website that is infected while still having gmail cookies stored in your browser (or even still having gmail open and logged in with a different tab).

5) Getting infected and having a keylogger on your computer that captured the login username/password.

There are obviously other ways too, but these are the most common. if any of these apply to you, I would look into changing the behavior to protect future possible attacks.

[FrogMan]

From the details link, was it a Chinese IP access through gmail's mobile interface, or did it say browser?


it said browser

FM

[DaddyTorgo]

Common ways accounts are hijacked for this type of thing:

1) Using a simple password, especially one that is a dictionary word or proper name.

2) Using password retrieval questions that are easily answerable through social engineering. (ie: if your facebook account is very public and has all of the information in it that is needed to answer the questions gmail requires to reset your password... such as first child's name, pet's name, etc).

3) Using the same password as other sites that might have been compromised.

4) Using a web browser that is not secured (ie: you don't disable scripts, you don't disable iframes, you don't disable javascript, you don't use a protection like firefox noscript add-on, etc) and then hitting a website that is infected while still having gmail cookies stored in your browser (or even still having gmail open and logged in with a different tab).

5) Getting infected and having a keylogger on your computer that captured the login username/password.

There are obviously other ways too, but these are the most common. if any of these apply to you, I would look into changing the behavior to protect future possible attacks.

Or we could just nuke China & Russia.

I like my solution - it's easier.

[Passacaglia]

I think DT's account has been hacked by Jon.

[claphamsa]

I got this a couple months ago, i noticed when I emailed my work adress touting Viagra...