Google saids my yahoo account is compromised!?  Anyone seen this before? - Page 1
Forum section: electronics / general

author: Rick Law
author_rank: Super Contributor
timestamp: December 19, 2020, 10:41:47 pm
content: This is strange. I received from Google (or someone post as Google?)***Someone knows your password[my email id]@yahoo.comGoogle has become aware that someone else knows your password, and we've taken steps to protect your account. Please sign back into your account now and choose a new password to secure your account.Learn moreYou can also see security activityhttps://myaccount.google.com/notificationsYou received this email to let you know about important changes to your Google Account and services.© 2020 Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA*****According to the email's internet header, the email was originating from a google owned IP, but I am puzzled why would Google be the one notifying me about a yahoo logon.Anyone came across this before? I am wondering if it is a marketing ploy, a scam, or is it genuine. I am reluctant to log on to Google until I know a bit more about this notice.

author: tom66
author_rank: Super Contributor
timestamp: December 19, 2020, 11:12:50 pm
content: Google Chrome does this too. Compromised lists of passwords are sometimes published by hackers (many do it just for the "lulz" rather than any payout) and these are picked up by the likes of Google.

author: DrG
author_rank: Super Contributor
timestamp: December 19, 2020, 11:16:57 pm
content: Like most people, I get email telling me that my account has been compromised, everything is shut down and you have to go here ____ to fix it. Frequently I get these from banks where I have no account or something similar. It is easy to spot the embedded bad link.Your case, however, has been creating a stir with lots of people recently (see this thread)...https://support.google.com/accounts/thread/87074689?hl=enI would certainly not log into anything by clicking anywhere on the email, but that probably goes without saying..Let us know what happens eh?

author: DrG
author_rank: Super Contributor
timestamp: December 19, 2020, 11:23:05 pm
content: Quote from: tom66 on December 19, 2020, 11:12:50 pmYeah, I was reading that also. It is kind of silly in a some ways because it is so suspicious to receive and one would think that a more direct and specific explanation would be given. So, you find an account and pw listed on the "dark" web and send the owner that kind of message? I don't know...

author: sleemanj
author_rank: Super Contributor
timestamp: December 19, 2020, 11:30:20 pm
content: Check your yahoo email address against thehttps://haveibeenpwned.com/database.

author: retiredfeline
author_rank: Frequent Contributor
timestamp: December 20, 2020, 12:04:14 am
content: Sounds like Google took theyour_idpart ofyour_id@gmail.com and checkedyour_id@yahoo.com against the list of pwned Yahoo addresses* and warned you in case you used the same password.I gave up on Yahoo ages ago, after their leaks, also because of technical issues now and then blocking me from sending email to a list of friends.The service was sold off sometime ago, I don't know how the new owners make their revenue.* Those email addresses are publicly published, see the explanation athttps://haveibeenpwned.com/as posted by sleemanj.

author: bob91343
author_rank: Super Contributor
timestamp: December 20, 2020, 12:29:47 am
content: I get those scary emails all the time. I label them as spam and forget about them.

author: Ed.Kloonk
author_rank: Super Contributor
timestamp: December 20, 2020, 01:02:33 am
content: Quote from: Rick Law on December 19, 2020, 10:41:47 pmI get these from time to time with my 2nd google mail account that I refuse to adhere to their 2FA requests and I just uname and password in on a strange machine or in a private browser window.

author: retiredcaps
author_rank: Super Contributor
timestamp: December 20, 2020, 01:44:48 am
content: It's unfortunate, but sooner or later, through no fault of your own, your email address, address, birthdate, etc will show up in some pwn database.I can think of some scenarios. For example, you have friend who has all the contacts with the information above on their phone and their phone running some out of date Android OS version gets infected or compromised. It's not your device that got compromised, but your information is now compromised and publicly shown to the world.Or it could be any big company or local schoolboard that gets compromised. I scanhttps://www.bleepingcomputer.com/and see it daily.When I call in someplace to get my password reset, the tech support asks, what is your name, address, date of birth. You can see where this is going.

author: Rick Law
author_rank: Super Contributor
timestamp: December 20, 2020, 11:04:33 pm
content: Quote from: Ed.Kloonk on December 20, 2020, 01:02:33 amI too did not enabled the 2FA (two step verification, I assume). Google has been bugging me about it for a while then they stop bugging me. When I got this email, I thought that may be merely trying using another tactic to get me.I have very little trust in Google if any. If I could find another email server host (not email provider, but email domain hosting), I would have left Google long ago. I refuse to log on to Google except if there is something I must do.There was a day when Google's motto was "do no evil", these days, I can hardly think of anything else they do but.This reminds me of a quote from a old time well known CEO that I got from a business book about what not to do: "When you got the customer by the balls, their hearts and minds will follow..." This seem to apply to Google's mindset rather well today.

author: Stray Electron
author_rank: Super Contributor
timestamp: December 23, 2020, 03:37:33 am
content: Quote from: bob91343 on December 20, 2020, 12:29:47 amThe CORRECT answer!