0

Yesterday I registered accounts on some online storage websites. On that same day's afternoon, Google notified me about someone had has logged in using my Google account in US (clearly that's not where I live). So I had to change password and perform a whole PC scan.

enter image description here

What I did yesterday were:

  • Register account at copy,com
  • Register account at ozibox,com
  • Register account at sensortower,com
  • Register account at appannie,com
  • Authorize website to access account at ballloon,com
  • Authorize website to access account at filestream,me

Also I logged into this site but I registered long time ago:

  • ge,tt

Only google account is exposed so far (at least as I know). The computer is clean. I highly doubt that the sensortower and appannie were the cause. I used the same password for all account unless the site didn't allow it (stupid yes but this account is not my main account).

This is strange because if the hacker just tried the password from website to access to my Google account and accidentally succeeded then he had access to the account database of the site or he was the owner of the site himself.

If the hacker access my account using the Basic account info permission (View your email address - View your basic profile info). Then how was that possible? He only had my email address?!

No suspicious activity so far since I changed the password (I used the phone to change the password).

Can anyone try to replicate the attack with these sites? That would help many people from losing their accounts.

  • 3
    What makes you think your password was acquaired yesterday? It could have been acquaired long ago and kept in a DB sold, passed on, shared or whatever and finally been used yesterday. Since you seem to have the same password in different accounts any of those or any other place where you have used the same password could be the point where it has been acquaired. – YoMismo Oct 22 '15 at 8:49
  • If they got the pass long time ago then they have to test if it works or not. Or they could change the pass so I can't access and change the pass anymore (this is the most important thing). It's just too convenient that I logged into a bunch of sites and that the same day some one sneak into my account. – jcp0908 Oct 22 '15 at 8:58
  • 1
    Did you input your google password on any of these sites? Could one of those sites have been legitimately (if wrongly and incompetently) accessing your google account on your inadvertent request? Did you install any client apps? Your assumptions here may be relying on lacking information, or may be wrong altogether... – AviD Oct 22 '15 at 9:13
  • Of course I had to input password for sites that required. But only password for the site's account not on a Google login form. All the authorizations were performed with clicking buttons. As you can see the access was on a Windows PC with Firefox browser so some one in some way has my account's info and logged in. And I hate instilling client apps so no app was installed. – jcp0908 Oct 22 '15 at 9:50
  • @jcp0908 well, they could have tested your password yesterday. The fact that you logged in to a bunch of sites doesn't give any adventage (you have been warned by google, haven't you?), the adventage would have been you not noticing your account has been compromised. But anyone knows google keeps track and inform of possible unauthorized accesses. – YoMismo Oct 22 '15 at 9:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.