google account stolen?

[Sandgoose]

got my account stolen lucky it had NOTHING of importance associated with it so they may as well have gone and registered themselves a free gmail account

I used my gmail account on 3 devices.

1)Samsung galaxy S (this was running a custom (but trusted) rom from xda developers site, I have not had the phone for well over 6 months)

2)Sony Ericsson android phone (stock 2.1 rom, unrooted)

3)Sumvision tablet (budget device, android 4.1 rev1.4 from their website)

Turn on the table the other day having not powered it up for several weeks to see a few new emails in the inbox 1 from blizzard entertainment that I believe is legit but the message text is entirely in Chinese so I have no idea what it says and another message from goggle saying someone in china tried to log into my account but the action was blocked.

it also seems I have either forgot the account password or it was changed.

my phone is mostly running wifi disabled and I rarely enable grps (does wonders for the battery life)

when I do use it that account Is only used on my tablet and my phone.

I suspect the tablet because I used the account recently on my tablet (few months before the unauthorized login attempt) to authenticate an associated account (trusted site) and had to tap my password into the tablet.

so far I have left both devices disconnected from the internet and installed avg, both scan reports come back clean but I suspect it may be only scanning user installed apps?

also looks like I can recover the account but I need to make a secondary account in order to do that so I figure just let them keep the account and start over with a new one but I want to make sure my devices are clean first.

tldr : is there a better scanner I should try see if it picks up on any keyloggers or anything avg would miss ?

Thanks

 

[BRAINZ2013]

got my account stolen lucky it had NOTHING of importance associated with it so they may as well have gone and registered themselves a free gmail account

I used my gmail account on 3 devices.

1)Samsung galaxy S (this was running a custom (but trusted) rom from xda developers site, I have not had the phone for well over 6 months)

2)Sony Ericsson android phone (stock 2.1 rom, unrooted)

3)Sumvision tablet (budget device, android 4.1 rev1.4 from their website)

Turn on the table the other day having not powered it up for several weeks to see a few new emails in the inbox 1 from blizzard entertainment that I believe is legit but the message text is entirely in Chinese so I have no idea what it says and another message from goggle saying someone in china tried to log into my account but the action was blocked.

it also seems I have either forgot the account password or it was changed.

my phone is mostly running wifi disabled and I rarely enable grps (does wonders for the battery life)

when I do use it that account Is only used on my tablet and my phone.

I suspect the tablet because I used the account recently on my tablet (few months before the unauthorized login attempt) to authenticate an associated account (trusted site) and had to tap my password into the tablet.

so far I have left both devices disconnected from the internet and installed avg, both scan reports come back clean but I suspect it may be only scanning user installed apps?

also looks like I can recover the account but I need to make a secondary account in order to do that so I figure just let them keep the account and start over with a new one but I want to make sure my devices are clean first.

tldr : is there a better scanner I should try see if it picks up on any keyloggers or anything avg would miss ?

Thanks

hello welcome to the forums see you having a google problem.well from experience with google . you can retrieve your account just goto the google account from your device you want account recovery. make sure u change the pass word and write down. this will ask you if you want it texted or called but get it texted to your phone.follow the direction on the reset. but go to google account recovery . :smokingsomb:

 

[funkylogik]

I honestly dont mean this to sound patronising but are you sure you didnt just forget the password?
if your account has been hacked i highly doubt it happened from within one of your devices so no software could have stopped that. Its more likely someone miles away used your gmail address and somehow hacked into the password. Just change the password and set up that two step thingy (that i keep forgetting to do lol)

 

[Sandgoose]

I honestly dont mean this to sound patronising but are you sure you didnt just forget the password?

ever since lots of games and forums had been attacked I started using different passwords for everything.

I thought it had to be a keylogger as my password is very strong using random numbers letters and upper-case characters somewhere in the middle.

I have the password written down on paper although I was wondering if one of the characters was a 0 or an o (I tried both) but given the randomness of the password I didn't think someone miles away would have been able to guess or brute force it specially since I use it nowhere else.

I will try the recovery thing

thanks

 

[funkylogik]

Cool. I wasnt doubting u man but i have a lot of (maybe naive lol) faith in the security of android OS so if you didnt let anyone play with your devices and only installed apps from trusted sources then i cant understand how you got compromised. Im open minded though. I remember my facebook account got hacked and i didnt once suspect that it had happened from within my phone and i dont use a computer. Good point actually, could it have been a computer that got compromised? Id find that much easier to believe tbh. PCs seem kinda "messy" to me compared to android os :thumbup:

 

[Sandgoose]

just been through login on the browser again trying every combination of letter that may be a number just to make sure, I am quite confident the password was changed.

if the computer had been compromised they would have had access to everything but it seems they only got that gmail account, the skype account on the tablet seemed unaffected but I think it was set to remember login.

the only thing I could think is if the rom update had something in it or one of the installed apps did, but both avg and avast say it is clear

I'm generally good when it comes to security so I am confused as to how they got into the account,

probably factory reset it and see if they account goes again.

 

[funkylogik]

Yeah factory reset is probably the safest way to go mate. I wouldnt rely on these antivirus apps btw, theyve been proven to be mostly crap lol. I think of them more as a placebo peace of mind thing that if anything, lets you drop your guard :thumbup:

 

[BRAINZ2013]

Not just the factory reset do the account recovery and reset the email password and change the email address also . Try the account recovery all u need is a phone to text the approval number to and u set .