3 ms·
Mat posted a screenshot of his Gmail inbox which showed an email about Apple's password reset. So I'm guessing the hackers had compromised Gmail account BEFORE
by rogerchucker 14y ago
Mat posted a screenshot of his Gmail inbox which showed an email about Apple's password reset. So I'm guessing the hackers had compromised Gmail account BEFORE they called up Apple tech support. Or maybe that email was just an attempt and didn't help anyway with the actual password retrieval. I'm confused about this...
- maxerickson 14y agoThe original blog post makes it quite clear that the .mac account was used to compromise the Gmail account. I think the screenshot is from after he regained control of the Gmail account.
- rogerchucker 14y agoOh... in that case, how can a .mac account be used to compromise a Gmail account - using Forgot Password?
- maxerickson 14y agoYeah, one of the Gmail account recovery mechanisms is some process involving another email address.
- moreati 14y agoAIUI the .mac account was the backup email address of the Gmail account. So 1. The attacker compromised the .mac account. 2. The attacker used the I forgot my password feature of Gmail - to get an account reset email for the gmail account sent to the .mac account.