Do I have a hacked email account?
Do I have a hacked email account?
Hey everyone! Recently someone tried to log into my email from a strange place, so Google stopped them right away. After that, I changed my password (and 2FA is already turned on). Then I got an email saying I made a Snapchat account when I didn't. I ignored it because I thought someone accidentally opened my email and created an account with it, but verification shouldn't happen just by clicking if it's not real. But the day after, I got another email confirming that account was verified. Right then, I downloaded Snapchat on my phone and tried to log in with my email. I successfully reset my password and entered the account. He sent some spam virus messages to random people. Also, I found strange blackmail messages in my junk folder where he said if I don't pay him money via Bitcoin, he will publish my data or something like that. I just ignored it. He gave me about 48 hours, which was almost a month ago at this moment. I cleaned up my system and changed passwords for every single account I used to know. But how is this even possible? How did he verify a new account if I didn't log in with my email? And why would he try that? Also, his login activity only shows me, but Google stopped him instantly after the attempt. I also want to ask: how could he bypass my 2FA on every single account I have?
I mainly go with Google because I also use Microsoft login, but that is just my way of doing it most of the time.
I should double-check if SMS-based two-factor authentication is actually enabled. If yes, I think a hacker might have used your phone's messages to get into your account. SMS-based security is really not strong enough to stop bad guys.
You're telling me I need to turn off my SMS-based two-factor authentication and keep just the Google app login? Because right now, I'm using both methods.
You need to check your forwarding rules. It sounds like an automatic setting has been added that sends every message you receive directly to someone else's address.
It is best to turn off SMS-based two-factor authentication when you can help it. You can find more details on this site: https://securityboulevard.com/2021/12/wh...ot-secure/.
I looked at it and saw no mail forwarding options. But there were POP and IMAP turned on, so I turned them off instead.
Thanks a lot. Before, I'd back up both photos because I was scared something could go wrong with my phone, like stopping working entirely or me losing the device. Then I'd lock myself out.
That's always the exciting thing about Two-Factor Authentication. Most times, they give you a special code or backup piece of paper you can print out so you still have access even if you lose your main key.