Remediate Compromised Gmail Account

How to Open Gmail Settings:

1. Login to Gmail at email.kent.edu with your FlashLine credentials
2. Click the gear icon underneath your name in the upper right corner 
3. Select “Settings”

Fix Changed Signature:

1. Open Gmail Settings
2. Select the “General” tab along the top
3. Check the “Signature” section for signatures that you did not set
   • Report any signature that you did not set to security@kent.edu and then delete the signature

Fix Forwarding:

1. Open Gmail Settings
2. Select the “Forwarding and POP/IMAP” tab along the top
3. Check the “Forwarding” section for forwards that you did not set
   • If there is no forward set, you will see “Add a forwarding address”
     
   • If there is a forward set up, you will see forwarding options. If the email address in the forward is not one that the user set, please report it to security@kent.edu and then delete the forward
     

Fix Reply-To Addresses:

1. Open Gmail Settings
2. Select the “Accounts” tab
3. Check the “Send mail as:” section for Reply-To Addresses that you did not set
   • If there is a Reply-to address that you did not set, report it to security@kent.edu
   • Remove the Reply-to address by clicking “edit info,” clearing the fields, and then clicking “Save Changes”
     

Fix Filters/Inbox Rules:

1. Open Gmail Settings
2. Select the “Filters” tab
   • Report any filters that you did not set to security@kent.edu and then delete the filters

End All Active Sessions:

1. Login to Gmail at email.kent.edu with your FlashLine credentials
2. Click on “Details” on the bottom, right-hand side of the screen 
   • If there is unauthorized activity, please copy it and report it to security@kent.edu
     
3. Click the “Sign out all other web sessions” to make sure that you are not logged in anywhere else