People that have received this warning so far: * @gesa, Obama campaign web developer says an infosec staff member got one: https://twitter.com/gesa/status/2101

People that have received this warning so far: * @gesa, Obama campaign web developer says an infosec staff member got one: https://twitter.com/gesa/status/210184075149979649 https://twitter.com/gesa/status/210184075149979649 * @dandrezner, international relations professor: https://twitter.com/dandrezner/status/210103984881549312 https://twitter.com/dandrezner/status/210103984881549312 * @TomLasseter, Bejing Bureau Chief for McClatchy Newspapers: https://twitter.com/tomlasseter/status/210210259019640835 https://twitter.com/tomlasseter/status/210210259019640835 * @JeffreyCarr, CEO of Taia Global and author of Inside Cyber Warfare: https://twitter.com/jeffreycarr/status/210227611912257537 https://twitter.com/jeffreycarr/status/210227611912257537 * @snowfl0w, malware analyst for Contagio Dump: https://twitter.com/snowfl0w/status/210207958376779776 https://twitter.com/snowfl0w/status/210207958376779776 * @w7voa, Voice of America Bureau Chief covering Korea and Japan: https://twitter.com/w7voa/status/210194791479250946 https://twitter.com/w7voa/status/210194791479250946 * @marcambinder, national security reporter for The Atlantic and GQ: https://twitter.com/marcambinder/status/210184141180911617 https://twitter.com/marcambinder/status/210184141180911617 * @DDysart, web developer?: https://twitter.com/DDysart/status/210183540535590912 https://twitter.com/DDysart/status/210183540535590912 This is not looking good... some people on this list have gone and installed Google 2FA after realizing their computer might be compromised. Enabling two-factor auth WILL NOT resolve this issue if your computer has been compromised. If you get this warning, you need to bring your computer to someone with real security expertise and have it checked out. Strongly consider cleanly reinstalling your OS, then enable two-factor authentication. EDIT: Here's the message that Google is giving to people that have been affected: http://support.google.com/mail/bin/answer.py?hl=en&ctx=mail&answer=2591015 http://support.google.com/mail/bin/answer.py?hl=en&ctx=m... It looks like they're detecting exploit code sitting in people's accounts, mostly in the form of PDF and Office docs and inside RARs. This might explain why snowfl0w is on the list, since he handles a lot of this stuff daily and some of it likely goes through his e-mail (on purpose). It's unclear if this means that your account was successfully compromised. It's more likely that it means someone is attempting to get into your account.