Sheffield Forum
Your message here

Is this a phishing email, or legit from Google?

Home > General > Computer & Tech Chat

Reply To Topic
 
Thread Tools Search this Thread
15-07-2018, 08:48   #1
Waldo
Registered User
 
Joined: Sep 2008
Total Posts: 5,825
Status: Online
Hello,

I just got an email, purportedly from Google.

-----

Subject line is:
Review blocked sign-in attempt

-----

Content is:
Hi,
Google just blocked someone from signing into your Google Account <my-email>@gtempaccount.com from an app that may put your account at risk.
Less secure app
Sunday, July 15, 2018 8:44 AM (Vietnam Time)
Phường 3, G Vấp, Ho Chi Minh City, Vietnam*Don't recognize this activity?
If you didn't recently receive an error while trying to access a Google service, like Gmail, from a non-Google application, someone may have your password.

-----

Next, there is a link to 'secure your account'. Which surprises me; it's good advice never to click on any links in these kind of emails (who knows where they're coming from). The link does go to https://accounts.google.com/AccountChooser?Email=... however, which seems a legit google URL? Which if it is legit, seems bad form to me, as Google are training people to click on links within potential phishing emails.

Also, would be shocked if someone got my email, it's 30 characters of randomness. It is stored in an offline password manager, and also stored in my Firefox account. I'm thinking that could be a weak link. Presumably someone would only need to know my Firefox account login credentials, and voila, they have all my stored passwords. Probably best not to keep anything important in there. I also just turned on 2FA for Firefox account, so I'm guessing that means I can sign in from any new device without completing 2FA?
  Reply With Quote
15-07-2018, 08:50   #2
*Wallace*
Registered User
*Wallace*'s Avatar
 
Joined: Dec 2007
Total Posts: 5,154
I would go to your account in your usual way and change your password.
  Reply With Quote
15-07-2018, 09:00   #3
Waldo
Registered User
 
Joined: Sep 2008
Total Posts: 5,825
Status: Online
Quote:
Originally Posted by *Wallace* View Post
I would go to your account in your usual way and change your password.
Thanks. Yep, that was the first thing I did.

Also need to make sure I have 2FA switched on for the account.
  Reply With Quote
16-07-2018, 12:05   #4
IT-Smith
Registered User
IT-Smith's Avatar
 
Joined: Sep 2015
Location: Sheffield
Total Posts: 142
To view the recent login activity, click "Details" on the bottom right of the mail page.

https://support.google.com/mail/answer/45938?hl=en

Check it looks ok and the IP address's belong to you or your ISP.
_______
IT-Smith Support Ltd
Home and Small business IT support in the Sheffield area.
0114 4070132 or 07952 905473
http://www.it-smith.co.uk
  Reply With Quote
16-07-2018, 13:40   #5
iansheff
Registered User
iansheff's Avatar
 
Joined: Dec 2007
Total Posts: 6,655
Forward it to Google, they will have a security link for you to report suspicious mails.
  Reply With Quote
Reply To Topic

Thread Tools Search this Thread
Search this Thread:

Advanced Search



All times are GMT +1. The time now is 23:13.
POSTS ON THIS FORUM ARE NOT ACTIVELY MONITORED
Click "Report Post" under any post which may breach our terms of use.
©2002-2017 Sheffield Forum | Powered by vBulletin ©2018