Gmail account users were alarmed with news that millions of e-mail addresses were hacked but Google insists there was no breach of its systems.
According to the Google spam and abuse team, what happened was due to a phenomenon known in security circles as ‘credential dumps’ whereby lists of usernames and passwords are posted on the internet.
“We’re always monitoring for these dumps so we can respond quickly to protect our users.
“This week, we identified several lists claiming to contain Google and other internet providers’ credentials.
“We found that fewer than two per cent of the username and password combinations might have worked and our automated anti-hijacking systems would have blocked many of those login attempts.
“We’ve protected the affected accounts and have required those users to reset their passwords,” the team said.
However, the hackers’ action still affected about five million users including many Maltese.
One of them was Nationalist MP Kristy Debono.
Hackers sent an e-mail to her entire contact list saying she was stuck in a foreign country and needed help.
Under the subject “SOS”, the hackers’ e-mail read: “Sorry for the inconveniences (sic), I am in Limassol, Cyprus.
“I am here for a week and I just misplaced my bag containing all my vital items, phone and money at the bus station. I need a little help from you.”
When contacted, she said she was overwhelmed with calls and text messages from people who were on her contact list, some of whom she had not spoken to in a long time.
She said some had replied to the e-mail and the hackers answered by asking for €900 to cover her expenses.
“At 7am, I started getting calls and text messages from people asking whether I was OK.
“They told me they had received an e-mail from me that I was in some kind of trouble.
“I was overwhelmed with calls and people’s reaction,” she said.
Google’s tips:
• Make sure you’re using a strong password unique to Google.
• Update your recovery options so Google can reach you by phone or e-mail if you get locked out of your account.
• Consider two-step verification, which adds an extra layer of security to your account.