Hackers using hacked google gmail account to buy google cloud account usage, this is what happened to one of my google gmail account. Fortunately it’s one of the account I don’t use often or not at all for a year or so, that’s why I didn’t turned on 2fa authentication.
Look like hacker use my google gmail account to buy google cloud account for whatever reason, whatever activities he/she engaged into. I didn’t pay much attention since I have email forwarding turned on, and any email going to that gmail account would forward to my main email account.
Below is the detail of what google cloud account was purchased using hacked gmail account.
On Tuesday, October 23, 2018, 9:12:59 AM EDT, Google Cloud Platform, Firebase, and APIs <[email protected]> wrote:
Google Cloud Platform Go to my console »
Action required
Dear Google customer,You are receiving this email because you are a Google Cloud Platform, Firebase, or API customer.
Your billing account 016EEC-582053-43F555 has been suspended for failure to pay past due amounts or invalid payment information.
This may happen if your account is overdue or your credit card has expired or was cancelled and we haven’t received valid payment information from you.
Please update your account with valid payment information by following this link: https://console.cloud.google.com/billing/016EEC-582053-43F555/settings
If you do not provide a valid payment instrument and make any overdue payments within 30 days of this notice, your billing account and related Project(s) or Service(s) will be terminated.
If you have already updated your payment information, please disregard this message.
If you have any questions please contact us using this form: https://support.google.com/code/contact/cloud_platform_billingThe Google team
Google Plus Twitter Blogger
© 2018 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043You have received this mandatory service announcement to update you about important changes to Google Cloud Platform, Firebase, APIs, or to your account.