9

I believed that someone had hacked my Gmail because they were using information contained within my emails in an attempt to try to convince me that they were psychic. I told them that I didn't believe that they were psychic and knew they could only have obtained this information from reading my emails. I've not spoken to them since then, which was over a year ago. However, they have continued accessing my emails and they've been covering their tracks until recently. Recently, they've been forgetting to mark the emails they've read as unread after reading them, so when I loged in my new emails have already been read. Is there a way to prove that my Gmail has been hacked and file a police report especially being that I've already revoked access from devices and IP's that weren't mine?

This person is a self-professed hacker. When I told them that I knew they had accessed my emails they told me exactly how they had used a key logger back when we were working together to gain access to my account. My computer is secure now. All I need is to know now is how I can get information to file a police report.

Note: I don't have an account. I'm a public figure and I choose to be anonymous for a very good reason. Please stop removing my edits.

  • 18
    Note to original poster: please post your edits from the account you logged in originally. We have no way to verify that an anonymous edit is in fact submitted by you. – Deer Hunter Jul 9 '15 at 21:18
  • 10
    You have an account on Information Security Stack Exchange anyway. user80655 is your account. It does not have a password but you can access it thanks to cookies which were automatically stored in the browser you used to post the question. By finishing the registration and setting the access password you will not lose more of your anonymity. ------ If you are really concerned about anonymity use a tool like Tor Browser to access services where you want to stay anonymous and take great care of security of your computer. – pabouk Jul 10 '15 at 11:59
  • 4
    @Lohoris or simply use "they": english.stackexchange.com/a/55/1824 – Tobias Kienzler Jul 10 '15 at 14:03
  • 14
    If you are a public important figure and stuff, then I suggest you seek the advice of a paid professional, as opposite to random Internet strangers. – o0'. Jul 10 '15 at 14:33
  • 11
    Its mindblowing that you did not change your password the second you suspected that somebody was reading your emails. Also, i doubt your email is "hacked". Somebody has your password becasue you probably gave it to them. – Jakob Jul 10 '15 at 14:48
40

First things first, change your password and make sure the new password is secure (10+ characters, a number somewhere other than the last character, a capital somewhere other than the first character, not an iteration on your past password, etc). This is good to do periodically anyway.

GMail has tools for seeking suspicious account activity. Specifically, look at your recent security events, which should list all of your active logins plus all logins from the last four weeks, including locations and browser fingerprints (e.g. one of them will say "CURRENT DEVICE" to represent your browser right now. Are there others?).

Be wary about future attempts to obtain your credentials (somebody using your computer while you're logged in, a key logger, malware on your computer, or a phishing attack).

  • 44
    And ALWAYS turn on 2-factor authentication for cloud services that offer it and that you value. – Julian Knight Jul 9 '15 at 21:02
  • 4
    I can't link it, but at the bottom of your inbox view is some "Last account activity" info, including a "Details" link. This is more informative than the links I noted above, including the ability to boot all other web sessions. Press that button and review your recent activity. – Adam Katz Jul 9 '15 at 21:18
  • 13
    @AdamKatz why would a phone number be linked to a credit card? – user2813274 Jul 10 '15 at 5:51
  • 3
    While changing the password is the first thing to do here, I disagree with this answer stating that the op should use number and capital in his/her password. It makes them harder to remember and not more secure. Consider using a "diceware password" instead (a sequence of 7 randomly and independently choosen words, among a public list of 7776 words): world.std.com/~reinhold/diceware.html – Tom Cornebize Jul 10 '15 at 7:39
  • 3
    I can search for the related question: But there is no real sense in using a "super secure" password with a trustworthy service such as gmail. There DB is not likely to get hacked, so the attacker will not easily gain a hash. So he has two options 1. keylogger/phishing (Then the strength matter ZERO) - 2. Brute force on the service (Is usually blocked after X attempts, and secured otherwise). So your password only has to be good enough for about a 1/100.000 chance. So three random words is more than enough and easy to remember! – Falco Jul 10 '15 at 8:45
1

First, check the Account Activity Details link at the bottom of the webpage. Second, re-secure your account (change password, add 2-factor authentication,...)

This question deals with a similar situation of needing to re-secure a gmail account and check for unwanted access: Fell for phishing scam. Is my gmail account with 2-step verification vulnerable?

0

Proving someone that you suspect is responsible for hacking your google account is not only incredibly difficult not only for you gathering the information but difficult for any authority to follow up on it. Protecting yourself and your account should be your priority. Make sure you are using SSL for encryption and check out S/MIME as well.

However, if you do want to chase the rabbit down that hole. You could start by keeping an eye on IP tracker google provides for accessing your account. You could even put an image (web sites use a single pixel) within your email that is hosted on a server you have access to. If anyone reads your sent emails without disabling the images you can get their IP that way. You could even send yourself a zipped up piece of malware for your intruder to download.

Some of the trickery with pointing fingers at someone is, anyone can spoof anyone’s IP address. They could be getting that information directly from the online account, or having it sent to them via IMAP / POP. The latter of the two can use a separate application password as well. Not only that but, they could be getting that information another way, I.e MITM attacks which doesn’t require accessing your google account.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.