Hundreds of Gmail accounts in US and Asia hacked

[David Baxter PhD]

Google: Hundreds of Gmail accounts in U.S., Asia hacked
By Rachel King, ZDNet
June 1, 2011

Hackers around the world are gaining more attention than usual in the last few months. Now Google has added another announcement to the pile that hundreds of Gmail accounts have been hacked recently.

Now, Google affirms that the problem doesn?t rest with Gmail security but rather this scheme was a result of phishing and malware.

Google spilled the details on Wednesday via its official blog:

Through the strength of our cloud-based security and abuse detection systems*, we recently uncovered a campaign to collect user passwords, likely through phishing. This campaign, which appears to originate from Jinan, China, affected what seem to be the personal Gmail accounts of hundreds of users including, among others, senior U.S. government officials, Chinese political activists, officials in several Asian countries (predominantly South Korea), military personnel and journalists.

The goal of this effort seems to have been to monitor the contents of these users? emails, with the perpetrators apparently using stolen passwords to change peoples? forwarding and delegation settings.
​

Gmail users affected by this security mishap should have already been notified. Google?s security team outlined a number of steps that Gmail users can take to protect themselves, which should only take about ?ten minutes.?

Google recommended the following:

• Use two-factor authentication;
• Choose a strong password;
• Watch for suspicious activity warnings in your Gmail account;
• Check your settings for odd forwarding.

Google gave a hat tip to the blog Contagio, which highlighted the risks in February.

This attack attempt might seem like a small incident (which it certainly is in comparison to the problems with Sony?s PlayStation Network or even Apple and the MacDefender issue), but it?s a reminder that it?s always a good idea to take even just a few moments to ensure your online identity is safe.

 

[David Baxter PhD]

Google says Chinese hackers hit Gmail accounts

Google says Chinese hackers hit Gmail accounts
CBC
Jun 1, 2011

Google says computer hackers in China broke into the Gmail accounts of several hundred people, including senior government officials in the U.S. and political activists.

"This campaign, which appears to originate from Jinan, China, affected what seem to be the personal Gmail accounts of hundreds of users including, among others, senior U.S. government officials, Chinese political activists, officials in several Asian countries (predominantly South Korea), military personnel and journalists," Google said in a statement

"The goal of this effort seems to have been to monitor the contents of these users? emails, with the perpetrators apparently using stolen passwords to change peoples? forwarding and delegation settings."

Google says all victims have been notified and their accounts have been secured.

"It?s important to stress that our internal systems have not been affected ? these account hijackings were not the result of a security problem with Gmail itself," Google said. "But we believe that being open about these security issues helps users better protect their information online."

The attacks announced Wednesday on Google's blog aren't believed to be tied to a more sophisticated assault originating from China in late 2009 and early last year. That intrusion targeted Google's own security systems and triggered a high-profile battle with China's Communist government over online censorship.

The tensions escalated amid reports that the Chinese government had at least an indirect hand in the hacking attacks, a possibility that Google didn't rule out.

In the latest incident, Google believes Chinese hackers tricked people into sharing their passwords in so-called "phishing" scams.