More Than 1M Google Accounts Breached by Gooligan

#1

Post by idoco » Wed, Nov 30, 2016, 2:34 PM UTC

More Than 1M Google Accounts Breached by Gooligan
blog.checkpoint.com

Re: More Than 1M Google Accounts Breached by Gooligan

#2

Post by ohyoutravel » Wed, Nov 30, 2016, 3:37 PM UTC

Malware on your Android device picked up from third party app stores (FDroid? Amazon?) that steals email accounts and auth tokens. Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones.

You can see if your account has been affected here:

https://gooligan.checkpoint.com/

Re: More Than 1M Google Accounts Breached by Gooligan

#3

Post by [deleted] » Wed, Nov 30, 2016, 3:48 PM UTC

ohyoutravel wrote: post #2

Malware on your Android device picked up from third party app stores (FDroid? Amazon?) that steals email accounts and auth tokens. Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones. You can see if your account has been affected here: https://gooligan.checkpoint.com/

[deleted]

Re: More Than 1M Google Accounts Breached by Gooligan

#4

Post by an_account » Wed, Nov 30, 2016, 3:51 PM UTC

ohyoutravel wrote: post #2

Malware on your Android device picked up from third party app stores (FDroid? Amazon?) that steals email accounts and auth tokens. Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones. You can see if your account has been affected here: https://gooligan.checkpoint.com/

How did they get a list of compromised email accounts?

Re: More Than 1M Google Accounts Breached by Gooligan

#5

Post by alexcason » Wed, Nov 30, 2016, 3:59 PM UTC

Cached: http://webcache.googleusercontent.com/search?q=cache:http://...

Re: More Than 1M Google Accounts Breached by Gooligan

#6

Post by mapleoin » Wed, Nov 30, 2016, 4:02 PM UTC

Does anyone else use a special account for their Android phone that they don't use for anything else?

Re: More Than 1M Google Accounts Breached by Gooligan

#7

Post by boredinballard » Wed, Nov 30, 2016, 4:03 PM UTC

mapleoin wrote: post #6

Does anyone else use a special account for their Android phone that they don't use for anything else?

That's a good idea! I may start doing that.

Re: More Than 1M Google Accounts Breached by Gooligan

#8

Post by 4rtemis » Wed, Nov 30, 2016, 4:04 PM UTC

mapleoin wrote: post #6

Does anyone else use a special account for their Android phone that they don't use for anything else?

I don't use a Google account on my android phone. Cyanogenmod sans google anything.

Re: More Than 1M Google Accounts Breached by Gooligan

#9

Post by AdrianRossouw » Wed, Nov 30, 2016, 4:04 PM UTC

mapleoin wrote: post #6

Does anyone else use a special account for their Android phone that they don't use for anything else?

yup.

although that was mostly to separate out hangouts from what's on my phone.

Re: More Than 1M Google Accounts Breached by Gooligan

#10

Post by tyingq » Wed, Nov 30, 2016, 4:06 PM UTC

an_account wrote: post #4

ohyoutravel wrote: post #2

Malware on your Android device picked up from third party app stores (FDroid? Amazon?) that steals email accounts and auth tokens. Looks like it only works on the older Android 4 Jellybean software (and some Android 5 Lollipop) and below, so mostly concentrated in Asia where there are lower-end phones. You can see if your account has been affected here: https://gooligan.checkpoint.com/

How did they get a list of compromised email accounts?

This explains it better: https://plus.google.com/+AdrianLudwig/posts/GXzJ8vaAFsi