Girlfriend's Google Play got 'hacked'

Russinating · 11 Jul 2014 at 22:10

Girlfriend's Play account got compromised this morning but the trouble is I'm not sure how, and I'm not even sure if it's a password issue because this isn't exactly the worst you could do if you did manage to access a Google account.

This was the attempt:

The first one (£13.99) was cancelled by default, but the other one (£2.99) did go through and we only noticed it when she got a Google Play Receipt. I request a refund and props to Google they refunded it within 10 minutes, despite it being made over 12 hours ago.

We've changed all her passwords anyway but like I said I don't know if that's the issue. Does anyone know what is/how they'd do this?

Destination · 11 Jul 2014 at 22:11

These bits that were bought, are they usable anywhere outside of that specific account?
Is it like an 'in-app' purchase on an iphone?

Nitefly · 11 Jul 2014 at 22:12

Sounds like the old 'ABC Murders' trick to me.

Your girlfriend is addicted to Clash of Clans.

G-MAN2004 · 11 Jul 2014 at 22:14

Hikari Kisugi said:
These bits that were bought, are they usable anywhere outside of that specific account?
Is it like an 'in-app' purchase on an iphone?

Yeah, the gems for Clash of Clans are account specific. Your girlfriend is a secret addict, OP.

Arsonist · 11 Jul 2014 at 22:15

I'll go ring inspector Morse.

Russinating · 11 Jul 2014 at 22:16

No idea, but she has neither app installed (checked her phone to make sure it wasn't a 'hard' hack ie someone at work hadn't used her phone).

Pawnless Endgame · 11 Jul 2014 at 22:22

Her Gmail will tie in with her Play account. Could she pop into her Gmail and check the bit at the very bottom where it says "Last account activity: e.g. 55 minutes ago"? In there, it lists the last 10 logins and their IP addresses.

G-MAN2004 · 11 Jul 2014 at 22:23

Also, use this from now on:

https://support.google.com/accounts/answer/180744?hl=en

Russinating · 11 Jul 2014 at 23:06

Yeah we've enabled two step now. Was just interested as to how they do it.

Mynight · 11 Jul 2014 at 23:12

Don't suppose she has any third party apps installed? (Ie not from the play store)

Russinating · 11 Jul 2014 at 23:16

Nope, she has my old Nexus 4 and hardly uses it really other than normal calls/texts/web. Certainly hasn't installed anything not from Google Play; she doesn't even have a laptop.

Mynight · 11 Jul 2014 at 23:21

Hmm well the only way I know almost certainly wouldn't make it through google inspection on submitting to App Store so I'm out sorry.

mrk · 11 Jul 2014 at 23:31

Arsonist said:
I'll go ring Jessica Fletcher.

Fixed