Remediate Compromised Gmail Account
How to Open Gmail Settings:
- Login to Gmail at email.kent.edu with your FlashLine credentials
- Click the gear icon underneath your name in the upper right corner
- Select “Settings”
Fix Changed Signature:
- Open Gmail Settings
- Select the “General” tab along the top
- Check the “Signature” section for signatures that you did not set
- Report any signature that you did not set to security@kent.edu and then delete the signature
- Report any signature that you did not set to security@kent.edu and then delete the signature
Fix Forwarding:
- Open Gmail Settings
- Select the “Forwarding and POP/IMAP” tab along the top
- Check the “Forwarding” section for forwards that you did not set
- If there is no forward set, you will see “Add a forwarding address”
- If there is a forward set up, you will see forwarding options. If the email address in the forward is not one that the user set, please report it to security@kent.edu and then delete the forward
- If there is no forward set, you will see “Add a forwarding address”
Fix Reply-To Addresses:
- Open Gmail Settings
- Select the “Accounts” tab
- Check the “Send mail as:” section for Reply-To Addresses that you did not set
- If there is a Reply-to address that you did not set, report it to security@kent.edu
- Remove the Reply-to address by clicking “edit info,” clearing the fields, and then clicking “Save Changes”
Fix Filters/Inbox Rules:
- Open Gmail Settings
- Select the “Filters” tab
- Report any filters that you did not set to security@kent.edu and then delete the filters
- Report any filters that you did not set to security@kent.edu and then delete the filters
End All Active Sessions:
- Login to Gmail at email.kent.edu with your FlashLine credentials
- Click on “Details” on the bottom, right-hand side of the screen
- If there is unauthorized activity, please copy it and report it to security@kent.edu
- If there is unauthorized activity, please copy it and report it to security@kent.edu
- Click the “Sign out all other web sessions” to make sure that you are not logged in anywhere else