I have been hacked !!! Please help !!

[zems]

I've just been contacted by the person who hacked my gmail. He was asking money to give me back. He changed passwords on some of my accounts and I could only retreive account at godaddy by phone. There is still more than 100 names that he can control now.
Can anybody tell me any phone number of google , I have google ads account also and money on it but I just can't find any phone for contact.

Please help me

 

[kev]

As you requested, here is the password for your account at parked.com:

xxxxxxxxxxxxxxxxxxxxxx

Date Requested: 2008-11-23 22:12:00 PST
Requester's IP: 66.186.34.250
Requester's User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

We thank you for your business.

Best regards,
Parked.com Customer Support


Someone trying to hack my parked account!

Anybody else?

 

[zems]

If you are using gmail, check all filters and forwarding.

 

[kev]

Another access

Date Requested: 2008-11-23 22:14:57 PST
Requester's IP: 125.164.214.66


Also, the auto generated Parked message said I used the "Forgot Password" feature at the same time those warning emails were sent. They'll be disappointed what they find in my Parked account thats for sure...

I dont want to say what kind of email I have just in case Mr Scammer is monitoring NamePros. Ive checked that there is no forwarding, no filters etc... and Im hoping everything is secure. is there any other potential way they can access my account?

 

[mf1983]

Everyone who use Gmail need to check account and all domains,
support tickets and legal boxes , vps for strange ips.

You need also to check your computer.

If is the guy from address [email protected] he has got
verry interesting history from the 2007.

Phishing sites,Moneybookers acc etc...

He using difreents gmail accounts .....I have found about 8 gmail accounts from 2007.

We have also publish the story.
http://digg.com/security/BREAKING_New_Gmail_Security_Flaw_More_Domains_Get_Stolen

 

[mf1983]

Everyone who use Gmail need to check account and all domains,
support tickets and legal boxes , vps for strange ips.

You need also to check your computer.

If is the guy from address [email protected] he has got
verry interesting history from the 2007.

Phishing sites,Moneybookers acc etc...

He using difreents gmail accounts .....I have found about 8 gmail accounts from 2007.

We have also publish the story.

http://www.makeuseof.com/tag/breaking-gmail-security-flaw-more-domains-get-stollen/

 

[kev]

I havent had anything stolen yet (not that I know of anyway...)

Ive just had a password request from 2 different IP addresses for my parked password?

im a bit worried with all these stories!

if anyone has any updates, post 'em here so we can get to the bottom of this!

thanks

 

[zems]

There is also option that he using keyloger. After that happen to me I didn't want to search in my computer is there any keyloger, I just formated everything and put new sistem so I can sleep without thinking about that.

 

[Earthian]

sidenote about keyloggers :

one smart trick against keyloggers when you want to log-in while using an uncertain computer (eg. in an internet cafe) is ...





to type your password with many random letters/numbers in between ... then use the mouse to delete the fake letters/numbers (mouse movements are undetected by keyloggers) ... leaving only the correct password elements before you click OK

​

 

[seven]

I copy and paste my passwords into fields. Does this protect against keyloggers?

 

[Earthian]

after searching somewhat more on keyloggers it seems that newer (key)loggers might possibly detect mouse operations (not sure about exact mouse positions/clicks , but depending on the program it could also be possible)

however , simple (read: older) keyloggers that log only keystrokes would logically be "tricked" with the random-letters trick described in my previous post

more in the wikipedia article on Keystroke Logging










seven - copy&paste does protect against the simple keyloggers that just log keystrokes

2 things ...

a. a website can retrieve what you have in your clipboard

go to http://hexillion.com/co and click on Browser Mirror to check what your browser reveals

(when I went some years back with IE5 or IE6 the clipboard field was populated with the data I had in my clipboard , today that I went with IE7 I got an IE pop-up whether I wanted the site to access my clipboard , to which I pressed Don't Allow)

b. check the wikipedia article at the top of this post ... both the random-letters and the copy/paste tricks are mentioned in the Non-technological methods of Keylogger prevention (Non-technological methods is the last paragraph of the article right above References)

​

 

[DanB]

i dont understand how can someone hack gmail account? u shold be carrefull where do u post ur gmail account and also log in only at gmail.com

More on this here: http://www.theregister.co.uk/2008/11/24/gmail_exploit/

Check the links in the article for further details.