• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Gmail hacked - Evo is number one suspect

bbenny

Newbie
May 13, 2010
20
1
today my gmail account was hacked and spam was sent from me to my entire email contact list.

here were the suspect IP's, and the message was about viagra pills. embarrassing to say the least.

Mobile Romania (89.37.187.9) 5:47 pm (1 hour ago)

Mobile United States (CA) (173.117.223.143) 12:16 pm (6 hours ago)


I have a very complex password and am a web developer that is very anal about privacy and security. had gmail for years, and just got the evo, and then this happens days later. not pleased at all.

has this happened to anybody else?
 
This might not be related to this issue, but I figured to throw it anyways.

I noticed a lot of spam coming to one of my email account since I've had the evo. I would think that some apps would sell your email account when you register it. That's why I use an entirely different email for registering apps or anything requiring an email account to register and will not put any personal or work email accounts at risk.
 
Upvote 0
What makes you think it had something to do with the EVO other than that it was coincidental timing?
Spammers are usually pretty good with proxies too, those addresses probably aren't anywhere close to the truth

Yeah setting up a proxy is childs play. Also, since your gmail got compromised, and if your password is up to snuff like you say it is, then more than likely it wasn't brute forced either. So your either looking at a phishing scam(browser hijack etc) or one of the machines you use to access gmail has a keylogger trojan.

-my advice as a former "hacker"... do a complete rollback of at least 60 days on any/every machine you own. Then create a new windows user account, and xfer the files you need saved, and delete the old winuser account.

Then go to start> winconfig. Disable everything not vital to running windows. (Graphics drivers, etc) if winconfig is corrupt, you've been hit by a nasty and a full wipe may be in order. (Every situation is different)

If you can't rollback, then a complete wipe is in order. To prevent yourself from being infected again, download a registry startup monitor, that allows you to see and alert you when a registry change is being attempted regarding startup. If you don't recognize the change at hand, don't allow it, and the virus won't be allowed to start with boot. If your unsure of the process name, google it. Most legit processes have some documentation, as well as malware. If it is malware, do a thorough search on your pc and manually remove said process.

Tapatalk. Samsung Moment. Yep.
 
  • Like
Reactions: Guidoic
Upvote 0
Yeah setting up a proxy is childs play. Also, since your gmail got compromised, and if your password is up to snuff like you say it is, then more than likely it wasn't brute forced either. So your either looking at a phishing scam(browser hijack etc) or one of the machines you use to access gmail has a keylogger trojan.

-my advice as a former "hacker"... do a complete rollback of at least 60 days on any/every machine you own. Then create a new windows user account, and xfer the files you need saved, and delete the old winuser account.

Then go to start> winconfig. Disable everything not vital to running windows. (Graphics drivers, etc) if winconfig is corrupt, you've been hit by a nasty and a full wipe may be in order. (Every situation is different)

If you can't rollback, then a complete wipe is in order. To prevent yourself from being infected again, download a registry startup monitor, that allows you to see and alert you when a registry change is being attempted regarding startup. If you don't recognize the change at hand, don't allow it, and the virus won't be allowed to start with boot. If your unsure of the process name, google it. Most legit processes have some documentation, as well as malware. If it is malware, do a thorough search on your pc and manually remove said process.

Tapatalk. Samsung Moment. Yep.

F that... I'd format everything I had

Can you tell us what types of porgrams you had running on your evo? Any sideloaded apps? Any warez?
 
  • Like
Reactions: Connectz
Upvote 0
My wife has the Droid Incredible and one evening she noticed she could not check her email on the phone and that all her email accounts the password was changed...

Luckily we were able to get back into them by the lost password option and security questions. We have no idea how it changed, plus we both use Macs so no viruses on the computers, and on her phone she had one of those virus scanners, so we think the phone someone did something as well....
 
Upvote 0
today my gmail account was hacked and spam was sent from me to my entire email contact list.

here were the suspect IP's, and the message was about viagra pills. embarrassing to say the least.

Mobile Romania (89.37.187.9) 5:47 pm (1 hour ago)

Mobile United States (CA) (173.117.223.143) 12:16 pm (6 hours ago)


I have a very complex password and am a web developer that is very anal about privacy and security. had gmail for years, and just got the evo, and then this happens days later. not pleased at all.

has this happened to anybody else?

It happened to me also, the same exact thing. Then Google sent me an e-mail telling me my account was compromised. Very embarrasing
 
Upvote 0
Same thing happened to me. Never happened before. Spam was sent to all of my contacts. I woke up one morning to my Evo telling me it couldn't sync my Google account. I log in on my computer and saw a message from Google that my account had been compromised and that I had to change my password. Don't think it's Evo related but it was odd it only occurred after I started using it. Security hole somewhere?
 
Upvote 0
My wife has the Droid Incredible and one evening she noticed she could not check her email on the phone and that all her email accounts the password was changed...

Luckily we were able to get back into them by the lost password option and security questions. We have no idea how it changed, plus we both use Macs so no viruses on the computers, and on her phone she had one of those virus scanners, so we think the phone someone did something as well....

Lmao @ people really beleiving macs are somehow magically virus free. If you learned the truth(which is macs are more vulnerable to hacks and malware than windows. Tested & proved, many times. Google it.) you wouldn't touch a mac with sensitive informations.

And here's something I just thought of. Are you guys rooted? Maybe its the root hack itself that's doing this.


Tapatalk. Samsung Moment. Yep.
 
Upvote 0
guess this is why my coworker uses a 36 character algorithim for all of his passwords...and he changes it weekly.

still laugh at my friends who use the same password for everything.

Damn..... now that's crazy sauce. I have a list of passwords I selectivey rotate, phase in and phase out, and retire after x uses. They range from 4 characters to 14 characters, depending on the password requirements/limitations etc. If you have a series of 8 digits, numbers and letters, and rotate them on a regular basis, it is damn near impossible to brute force. So other methods of retrieval are needed. If those other methods are successful, it doesn't matter if your password is abc123 or kslfjsjfhei&#*@@(##2818kk2k2k29s9, it's as easy as copy and paste.

Tapatalk. Samsung Moment. Yep.
 
  • Like
Reactions: laurambogart
Upvote 0
I can't tell you how many apps i refused to install because it asked for phone or something privlidges and i said what for? no thanks.

I have noticed sync errors on my chrome (looking at it now) but i assumed that was cause the evo was logging in and only one can be logged in at a time? Also noticed a few more spams but they seemed to have slowed down/stopped.

this is why i didn't install that rock player or whatever its called. list your apps please.
 
Upvote 0
Lmao @ people really beleiving macs are somehow magically virus free. If you learned the truth(which is macs are more vulnerable to hacks and malware than windows. Tested & proved, many times. Google it.) you wouldn't touch a mac with sensitive informations.

And here's something I just thought of. Are you guys rooted? Maybe its the root hack itself that's doing this.


Tapatalk. Samsung Moment. Yep.

Another reason they think Macs are virus free, is because Windows OS has a far more market share. So people tend to exploit Windows rather than waste time with Macs.


EDIT: Just checked my Gmail app, only 6 emails so far, 2 game purchases, 2 refunded messages, and that iPhone plunger stand I sent to myself :p. Had the phone since release day.
 
Upvote 0
Lmao @ people really beleiving macs are somehow magically virus free. If you learned the truth(which is macs are more vulnerable to hacks and malware than windows. Tested & proved, many times. Google it.) you wouldn't touch a mac with sensitive informations.

And here's something I just thought of. Are you guys rooted? Maybe its the root hack itself that's doing this.


Tapatalk. Samsung Moment. Yep.

Macs are magically virus free (no known viruses in the wild). Why? Because OSX has not been targeted by any virus devs - they are too busy wrecking Windows. That doesn't make OSX any better more or secure than Windows, it just makes us Mac users lucky that Apple has a small enough market share that "hackers" don't find it worthwhile to make OSX viruses. There are a few OSX trojans out there though, so we still need to be careful what we download.
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones