On the 23rd April 2014 at 11h26m I received as SMS from google notifying that my password from my e-mail address email@example.com had been changed. I was surprised as we did just wake up minutes before. I went online and at 12h05m managed to receive a link to reset the password through my phone number that was registered in gmail. We also changed the recovery email address to my husband work e-mail.At 12h45m I received a second SMS from google informing a password change. I repeated the procedure to get the password changed again.At 12h46m the recovery address was changed by the intruder to my former work e-mail address: firstname.lastname@example.orgAt 12h46m the phone number that was linked to my gmail account was changed by the intruder to an unfamiliar number: +27 82 467 0882.At 13h47m I was able to change the password and regain access to my e-mail account this time by answering a couple of security questions and removed the email@example.com e-mail address.At 13h47m I removed the unknown number +27 82 467 0882 and added my mobile number again.At 13h51m I re-changed the password once again just as a precaution.At 13h52m I added my husband e-mail address as a recovery once again.At 14h05m I received another SMS notifying that my password was changed once again.This time the only information available to access the recovery link to reset the password was my previous job e-mail address firstname.lastname@example.org that I din't had access.I only managed to access my e-mail address at 16h45m through a long process of validation.I deleted my account at 17h00m after erasing all sort of ways to recover email address.I restored my account on the 24th April 2014 at 19h19m.After checking my security tab i got an IP address: 188.8.131.52 and the phone number: +27 82 467 0882.I managed to take 13 screenshots of every log used by the hackers IP address.I noticed that 43 e-mail messages were forwarded to my work e-mail address email@example.com, my previous work that I left on the 28th of March 2014.Is it possible to know who's the person behind this attack?
|Crime Date/Time:||23 Apr 2014, 00:04 AM|
|Reported Date:||6 May 2014, 21:05 PM|