Post #1763652

2024-10-26 15:24 UTC

Neighbor just called asking for help because their Gmail account was hijacked and now they&#39;re locked out (and the hijacker chained off that to other accounts). I&#39;m heading over in a bit to help. This is the will be my first experience with the process from the consumer perspective.

Replies (2)

@jschuh@infosec.exchange 2024-10-26 16:42

Gmail account appears to be fine, but the Amazon account has definitely been hijacked. Looks like the attacker texted a link that the neighbor clicked on this morning, and that completed some sort of account ownership transfer. Neighbor assures me they just clicked the link and didn't enter anything. They just landed on an Amazon page that said their account had been successfully transferred to someone else (they have a screenshot of the hijacker's email address). They've been on the phone with Amazon trying to get it resolved, but if the description is correct it sure seems like there's a vulnerability on Amazon's end here. At exactly the same time the SMS was sent the neighbor's Gmail account got hit with a firehose of thousands of spam messages persisting for several hours, which is why they thought the Gmail account was hacked (and also why they clicked the Amazon phishing link from the SMS). Does this sort of thing sound familiar to anyone?

Open ##2795733
@filippo@abyssdomain.expert 2024-10-26 15:28

@jschuh@infosec.exchange go/helpmyfriend is cheating, but if it comes to it it's very effective.

Open ##2795734