3 ms·
[This is one of my worst nightmares] Was the phishing email designed to impersonate Google and/or passed Gmail's spam filter? If so, Google should be very inte
by klabb3 5y ago
[This is one of my worst nightmares]
Was the phishing email designed to impersonate Google and/or passed Gmail's spam filter? If so, Google should be very interested, so make sure this is communicated to them.
Getting Google's attention is unfortunately one of the few ways to increase your chances in the human intervention account recovery pipeline, which I suspect is understaffed. If that doesn't work, sharing an (appropriately redacted) screenshot of the phishing email on social media could also be helpful. (Absurd, I know)
If you're lucky, some Google employee on abuse/account recovery might see this and escalate. Wish your friend best of luck!
- ohashi 5y agoShe doesn't have a copy, she deleted it. I believe it was one of these: https://thethaiger.com/news/national/officials-warn-about-various-scam-thailand-pass-emails-some-with-malicious-links https://thethaiger.com/news/national/officials-warn-about-va... Targeting people doing Thailand Pass, but can't confirm it's the exact same details in terms of headers and such.
- tluyben2 5y agoIf she downloaded and executed a file, I can see how everything can go wrong fast; what are other ways to get into your Google account unless by having your enter your password in a phishing page?
- ohashi 5y agoI suspect the attacker had (maybe still has) full access to her laptop. They wiped her phones, so I am assuming they are clean of malware and trying to get her to do everything from the phone which should be clean and not the laptop which we have to assume is compromised.