I have a gmail account
firstname.lastname@example.org and I am sending emails to a lawyer with corporate email (I don't know the software they use). I am sending monthly bills to the lawyer for consulting fees.
Last week, this lawyer was fooled by receiving an email from
email@example.com (note the difference in spelling) with one of my invoices attached, asking when payment would be sent. This person signed my real name, and asked that payment be sent via ACH. The lawyer was fooled and responded saying payment would be made next week. It was only by luck that he mentioned this to me in person and I told him I had sent no such emails.
I now surmise that:
- Someone has access to lawyer's name, lawyer's email address, my name, my email address, and an invoice of mine
- Seems likely that the attacker has access to either my gmail or the lawyer's email (I don't think it's possible Google was hacked)
- I access gmail with my Mac Air Laptop, Windows Desktop, Android phone
- I use two-fac on gmail, so it's doubtful someone has my password and logged in remotely
If I am the one compromised, how would I know? The only thing I can think of is that I have malware on one of my three devices that's allowing access to my gmail through a backdoor. Is there any other likely scenario?
And the main question: what can I do or should I do to stop this from happening again?