Do I have a hacked email account?
Do I have a hacked email account?
Hey everyone! Recently someone tried to log into my email from a strange place, so Google stopped them right away. After that, I changed my password (and 2FA is already turned on). Then I got an email saying I made a Snapchat account when I didn't. I ignored it because I thought someone accidentally opened my email and created an account with it, but verification shouldn't happen just by clicking if it's not real. But the day after, I got another email confirming that account was verified. Right then, I downloaded Snapchat on my phone and tried to log in with my email. I successfully reset my password and entered the account. He sent some spam virus messages to random people. Also, I found strange blackmail messages in my junk folder where he said if I don't pay him money via Bitcoin, he will publish my data or something like that. I just ignored it. He gave me about 48 hours, which was almost a month ago at this moment. I cleaned up my system and changed passwords for every single account I used to know. But how is this even possible? How did he verify a new account if I didn't log in with my email? And why would he try that? Also, his login activity only shows me, but Google stopped him instantly after the attempt. I also want to ask: how could he bypass my 2FA on every single account I have?
I mainly go with Google because I also use Microsoft login, but that is just my way of doing it most of the time.
I should double-check if SMS-based two-factor authentication is actually enabled. If yes, I think a hacker might have used your phone's messages to get into your account. SMS-based security is really not strong enough to stop bad guys.