I have a FlipKey account (property rentals site) that has been hacked and I'm hoping to understand how it happened and what I should do to prevent it from happening again.

The hacker is able to get into the system even though the password has been changed. Tech support from Flipkey is not helpful and only say to change the email and provide few reasons to explain why it happened or how to prevent it in the future.

Furthermore, the hacker or bot still seems to be in the system sending one of those 'WhatsApp' worms. The same email is used for other property sites.

I've changed the password and email already.

The question is what could have caused this on FlipKey and how can I prevent this from happening in the future?

  • I'm not sure how anyone can answer this. We could never have enough info to help you.
    – schroeder
    Apr 7, 2015 at 22:28
  • If you changed the password and the hacker is still able to get in then it's probably not gmail/flipkey that has been compromised, it's the computer you are using. The hacker is watching when you change passwords. My suggestion is to shut down down your computer. Borrow a friends machine and change the password on EVERY site you use. Hire a professional to back up your data, and re-install the OS on your machine. Apr 7, 2015 at 22:33

1 Answer 1


Step One: Attempt to secure you computer, if an attacker has compromised your computer they could be using key-logging software to capture your passwords or remotely control your session:

  1. Run two virus and malware scans, from well know, trusted vendors.
  2. Remove any unused software.
  3. Remove any unused extensions or plugins from your browser.

Step Two: Ensure your gmail account is configured securely. Most password reset functionality trusts only you can access your email account. If someone has access to your email account they will be able to access most of your accounts.

  1. Change the password
  2. Set up two factor authentication on your account.
  3. Check which application have what permissions to your google account via https://security.google.com/settings/security/permissions?pli=1

Step Three: If you have any Android devices associated with this gmail account, review which app's you have installed and what permissions these have. Remove any app that your don't use or has more permissions then it requires.

Step Four: Check your security settings in FlipKey, I don't know FlipKey so this are general advice:

  1. If you can change the login provider to one of the big names do so. (logon with [Google, Facebook, Yahoo, etc].
  2. Otherwise change your password, and if FlipKey provides two factor authentication enable this.
  3. Have a look through your account page and see what other security features FlipKey provides.

If after this you still have an issue I would follow the advice of @AntoniusBloch and use a separate computer to change your passwords again and wipe your computer, and reinstall.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .