问 HN：旧的 yahoo.com 邮箱上的 Google 账号被劫持到 Google Workspace
2 分•作者: FlyingAvatar•5 个月前
一夜之间，我收到了数十封来自 Google Payments (noreply@google.com) 的电子邮件，通知我某个付款资料中的联系电子邮件正在被更改。这个付款资料要么是我从未创建的，要么就是非常久远。这些都是真正的 Google 通知，并非钓鱼邮件。<p>一开始，我的旧邮箱地址（一个我用了 20 多年的 Yahoo 邮箱）被替换成一个 gtempaccount.com 地址，看起来攻击者是把账户转移到了 Google Workspace 中。<p>我不清楚他们是如何在未经我允许的情况下对一个 yahoo.com 邮箱地址进行操作的，但我 99% 确定我的 Yahoo 邮箱是安全的。尽管如此，我还是采取了标准的安全措施（更改了密码，确认了已启用的两步验证）。<p>从那以后，我收到了大量类似的通知，不同的邮箱地址轮番出现在同一个资料中。<p>我仍然可以登录我的原始账户，但它显示的是“@gtempaccount.com”后缀，而且似乎无法在账户内进行任何有用的操作。<p>尽管我进行了广泛的搜索并与 Google 的支持机器人进行了交流，但没有找到可以明确报告此问题的地方。<p>非常欢迎您提供关于在哪里实际报告此问题或采取其他措施的建议。
查看原文
Overnight, I received dozens of emails from Google Payments (noreply@google.com) notifying me that contact emails are being changed on a Payments profile that either I never created or is extremely old. These are actual Google notifications, not phishing attempts.<p>It started with my actual old email address (a Yahoo address I've had for 20+ years) being swapped out to a gtempaccount.com addresss, which appears to be the attacker moving the account into a Google Workspace.<p>How they did this for a yahoo.com email address without my approval is not clear, but I am 99% sure my Yahoo email is secure. I have taken the standard precautions anyway (changed password, confirmed 2FA which is already enabled)<p>Since then I've received a flood of similar notifications with different email addresses cycling through the same profile.<p>I can still log into my original account but it shows as the "@gtempaccount.com" suffix, and there doesn't seem to be anything useful I can do within the account.<p>Despite extensive searching and chatting with Google's support bots, there is no clear place to report this issue.<p>Any suggestions as to where this can actually be reported or other actions to take are very welcome.