More than 5 million passwords of Google accounts leaked

[ChknFngr]

https://translate.google.com/translate?sl=ru&tl=en&ie=UTF-8&u=http%3A%2F%2Fhabrahabr.ru%2Fpost%2F236283%2F

 

 

 

one of my email was leaked :/

and ofc its the one i use for my phone and also for work so hurry and check/change password asap

 

now i'd like to know how they did that coz im pretty cautious

 

EDIT (removed link to the checker it may be fake/phishing website)

Edited September 11, 2014 by ChknFngr

[HarryWeezer]

This looks like a load of BS. I would NOT recommend you enter your address in the second link.

[ChknFngr]

EDIT (removed link to the checker it may be fake/phishing website)

Edited September 11, 2014 by ChknFngr

[ChknFngr]

its not bs, the list was there, but these are old passwords, prolly an old list of accounts that were hacked long ago.

u dont really have to worry if u change ur password a lot

i didnt for this one, lesson learned

[ChknFngr]

oh u mean the check link ? well u dont have to check, u can just go and change your password, its a good thing anyway.

but there is honestly nothing to worry about the checker links even more if u change your password after checking

[Sitting-Duc]

Both services look to me like phishing services to get email addresses for a mailing/spam list. I would advise people not to use them. 

 

[little_old_man]

Several people have questioned whether isleaked.com is itself a phishing web site created by the very people who hacked Google. The domain was registered on Sept. 8th of this year, 2 days before Google acknowledged that they had been hacked.

 

What better way to get millions of people to give up their email login and passwords than by creating a website that claims to check it for you?

[Sitting-Duc]

I just clicked the isleaked.com one for the first time.. my AV is showing it as 'hosting malware' so yeah - doubtful it's genuine.

 

[ChknFngr]

lol whatever, just dont go there, but change ur passwords guyz

[ChknFngr]

Several people have questioned whether isleaked.com is itself a phishing web site created by the very people who hacked Google. The domain was registered on Sept. 8th of this year, 2 days before Google acknowledged that they had been hacked.

 

What better way to get millions of people to give up their email login and passwords than by creating a website that claims to check it for you?

how would they know your passwords if u just gona change them or already changed them ?

+ u dont even have to type your full mail adrress

i admit i also have doubts about the first link, but i dont see what they would do with the not complete info i give them and with no password at all, and with passwords that i change directly

 

but anyway thats not the point of this all thing.

 

if u have a google account, please change your passwords asap, and enable two step verification

[little_old_man]

You're right ChknFngr and that's good advice.

[ChknFngr]

hey u are also right,

checking those websites with your full email adress may not be a good thing, u never know, it may give them a list of used active emails.

not sure what they can do with that, but u never know.

 

 

EDIT im wrong, in fact this way they can get your email adress and ip

and if u checked several accounts ... well  infos are money ... sometimes.

 

i was dumb enough to check some emails. we'll see what will happen, but i think im pretty safe

 

better not checking BUT change all ur email passwords asap anyway

Edited September 11, 2014 by ChknFngr

[Sammy]

First saw that on a Yahoo article. I also immediately was suspicious of that website and wouldnt go there. I would have hoped that whoever wrote the article fact checked the owner to make sure it wasnt a scam.

[DEEJAYKEG]

http://www.nbcnews.com/tech/security/gmail-hacked-not-quite-says-google-change-your-password-n200571

[Sonovabich]

Where in Google do we go to change our passwords then?

[ChknFngr]

u go in your google account settings/account/security

[DeemerXI]

Just want to mention that Google never acknowledged they were hacked as they saw no indication or evidence that they were.  They aren't even sure the list is real.  It never hurts to change your password to be on the safe side and for gods sake, please don't link us all to bunk sites.

[ChknFngr]

yes google wasnt hacked, but websites related to google's accounts were.

google have no control on those

[ChknFngr]

hmmm

that link to check if ur email was leaked was and is also posted by well known anti-virus and security software blogs.

 

so they also fell in the trap or else i dunno

[7Toes]

lol my gmail account is for trash mail false name ect ect