So apparently, my fiance's gmail account was logged on by someone in UK. Just got the warning sign. It said it was logged on 4 days ago. She just changed the password.

Anything we can do at this point?

 

Make sure new password isn't a word and is at least 8 characters. Use mix of letters, numbers (upper and lower case), and symbols.

Run virus/malware scan on any PC she uses just in case. Hopefully nothing will come up.

Change her security question.

 

Time to swap to a brand new pc, sometimes those bugs hide in the ram, or onboard mem? or simply in a hidden file in the hard drive. Please tell me if this happens no more.

 

I think I've heard that line used by Best Buy

 

For all you know it got stolen directly from gmail themselves and your computer is fine.

On a side note, and I recently learned this too...

Man = Fiance
Woman = Fiancee

 

yeah that's almost always because of a phishing attack and there's nothing on your drive, changing your password should fix it.

Otherwise you have keylogger on your PC, but probably not

 

Google offers 2 factor security now. They can send you a text with a code in order to authenticate new computers (which have an option to be remembered for 30 days).

also, any applications or services that use your google account can receive unique passwords that can be revoked at any time. It's a pain in the ass sometimes, but the peace of mind is worth it imo.

read more here: http://googleblog.blogspot.com/2011/...-for-your.html

^gdamn it admins, please change hyperlink text fonts. annoying as hell. I've already made a thread on it in the "Improvements" forum but no response from admin.

that said, my account has been accessed twice in China a year ago. Ever since I changed my pw and got 2 factor authentication going i've never had a problem.

 

that's cause hyperlinks used to be a different color until they changed it. Don't think they're changing it back for you

 

i'm not the only one that gets bothered by it. it's basic HCI.


(see what i did there)

 

Thanks guys for the advice. Will do all the things that you guys have said.

Hopefully it won't happen again.

And thanks rockstar143 for that correction. I really didn't know that. haha

 

Anyways, run Malwarebytes full scan, see if it finds anything lurking on her computer.

People do not just guess passwords, especially when it comes to google....

 

Sign up for Google 2 step authorization. It's a bit of pain, but pretty much ensures against hackery.

 

I've started using the single sign on code if I have to log into my hotmail on a public computer. It's sends a code to my phone that I type in instead of my password just in case there's a keylogger on the PC it won't get my password

 

It's almost always a phishing attack, if she uses the same password that she uses on gmail on another site and ends up entering her email and password into a fake site then the hackers use that info to log into her gmail and spam her friends.

Another way is if she uses the same password on another site and that sites database gets hacked and login info stolen.

This is why you use different passwords for different sites.