The logged-in party tried to log into what s/he thought was their account to get access to the email and, using your weak password (as you have admitted), got lucky enough to log in. However, there are a couple of scenarios that I see if there is some kind of correlation between the two events: Scenario 1: Innocent Intent So, this set of events might not relate to the person who logged in. I get a dozen of these types of "mistakes" a week from around the world due to my fairly generic email account. The use of your email to sign up for services might be a coincidence and not being done by the party who logged into your account. I changed it to a password that's much stronger now.Īlso, if the attacker didn't gain control of the account, why use it to enroll in all these services?
The account in question is not my main account, and while the password on it was admittedly weak, it was also unique (I never used it on anything else). Someone out there is actively using my GMail address to enroll for these services. However, in the 2 weeks since then, I have received several email verification requests from various online services that I never signed up for - Spotify, OKCupid, a Nissan dealership in Pennsylvania (that one's interesting), and a few others I've never heard of before. Or maybe Google's fraud detection is actually decent and it knows I've never been to the Philippines? Either way, I immediately changed the password and (as far as I know) the attacker didn't gain control of the account. I gather this means that an attacker entered the correct user name and password for my account, but was likely blocked because they couldn't pass the MFA challenge. I signed into that account and looked at the activity (not by clicking the link in the message, of course) and indeed there was a sign in attempt blocked from the Philippines. Google blocked them, but you should check what happened. Someone just used your password to try to sign into your account. Just before Christmas I received the following message in one of my GMail accounts:
0 kommentar(er)
