How was my Gmail account hacked?

Question

gmail

Tonight I discovered that Gmail informs me of suspicious activity and offers me to reset my password by sending a code to my phone. In general, we will eventually get access to the box, I found there an attempt to send spam to my contacts, which was blocked by Google. And also a session to access my inbox from Indonesia.

At the same time, I have the latest FF 3.6, the latest NoScript, the latest McAffee with fresh databases. The password was a random combination of letters and numbers, although only 8 characters. I just don't understand how I could be hacked. Any ideas?

Answer 1

phishing

Answer 2

Couldn't it be that someone else was hacked with the same password and then just checked?

Answer 3

In vain rely on antivirus. There are many cases when hacking was carried out through a vulnerability in the antivirus.
On the subject: sometimes even gmail employees themselves are not immune from phishing. For every tricky ass , there's always a trickier one.

Answer 4

I have no idea how you were hacked (and no one here will tell you for sure), but in order not to happen again, use two-step authentication .

Answer 5

hijacked your cookies and substituted them in the right place.
You can hijack in different ways, for example, at one time it was common to steal passwords from servers through hacking ICQ and immediately steal passwords from Commander's totel, get access to FTP servers.
In general, you can embed a virus anywhere: a compact, a flash drive from a camera, an mp3 player, an email attachment, just installing an infected program from the Internet.
HOLIVAR:
McAffee is not the best antivirus in the CIS, and indeed not the best, besides, even the coolest antivirus with the freshest databases is not a panacea - tomorrow a new virus may come out and you will be the first (well, or 5000, but before you get into the fresh base).
I recommend Avira antivirus + Komodo firewall. By the way, many experts also praise Komodo antivirus, I also liked it. Both products are free for personal use and quite reliable.

Answer 6

They took your mail cookies.

Answer 7

A complex password is just a brute-force protection.
Antivirus - can hardly be called serious protection.
NoScript - its bypass methods are enough.
FF 3.6 - the current version is 4 - that's probably a bug, there are exploits for it.
They could also sniff Wifi.
More options to generate?