A banner will appear at the top of the page that warns users of an unauthorized account compromise.
(meta data) TITLE:  Google Online Security Blog: Security warnings for suspected state-sponsored attacks 238 captures 13 Mar 2016 - 01 Sep 2022 About this capture COLLECTED BY Organization: Internet Archive The Internet Archive discovers and captures web pages through many different web crawls. At any given time several distinct crawls are running, some for months, and some every day or longer. View the web archive through the Wayback Machine. Collection: Live Web Proxy Crawls Content crawled via the Wayback Machine Live Proxy mostly by the Save Page Now feature on web.archive.org. Liveweb proxy is a component of Internet Archive's wayback machine project. The liveweb proxy captures the content of a web page in real time, archives it into a ARC or WARC file and returns the ARC/WARC record back to the wayback machine to process. The recorded ARC/WARC file becomes part of the wayback machine in due course of time. The Wayback Machine - https://web.archive.org/web/20161208155921/https://security.googleblog.com/2012/06/security-warnings-for-suspected-state.html ## Security Blog The latest news and insights from Google on security and safety on the Internet ## Security warnings for suspected state-sponsored attacks June 5, 2012 #### 34 comments : Kevin Geng said... I still wonder how. Some custom plugin or HTTP header? said... Except when it comes to USGov intrusion, which is where Google makes half its money. Richard Teahon said... I know you guys have been getting some bad press lately, and as an SEO I can understand why, but I can only compliment you in this move to alert people who are probably going to be hit by trying to be good, no scrub that, outstanding citizens by trying to bring the truth to the masses. It is hard enough for us to get the message across in the west, in places where state sanctioned violence is commonplace, say Syria for example, then this initiative by Google is invaluable. It does in my book keep you above Microsoft. Ken Montenegro said... Does this include activity from government actors such as municipal and state police forces? how about federal agencies (or .gov IP blocks)? Thanks! said... Wow. Ian Danforth said... I applaud this warning and would only hope that in cases where evidence is strong enough the state in question is identified to the user. Mark D. Albin said... This is helpful information, we will help spread the word. said... Why would an end user care? Surely this is state-sponsored propaganda? said... I'd imagine that the people who are targeted by these attacks will know exactly which state would be interested in hacking into their account. Good on ya Google. Jacob Knott said... Any chance of a link to the page? Arron Ferguson said... If you see this warning it does not necessarily mean that your account has been hijacked. It just means that we believe you may be a target, of phishing or malware for example, and that you should take immediate steps to secure your account. I had this happen a few months ago. I got a rather worthless message after the fact (I did have a secondary email registered for such reasons) stating that my account had been compromised and I was alerted that there were current sessions open (in the Eastern block of Europe - I'm in Canada).What boggles my mind is that Google's "crack security team" here had really nothing to offer other than "close the sessions" and change the password. What Google and you are telling the entire world is that Google's security team is lazy; rather than just detect and log the incident, how about block/ignore/redirect brute force requests/logins? Seriously, you guys want us to trust you with something like Google+ and this is what you have to offer for security? Fail! said... Wow... Are there enough people wearing white collars and eating Swanson TV dinners to strike the fear nuclear war into everybody? said... Since New York Times recently reported that Stuxnet is a US State Sponsored Cyber virus - which if you recall was accidentally released into the wild and affected and attacked innocent end-user machines as collateral damage, and with the ongoing US-Israeli state sponsored cyber warfare weapons of mass destruction (operation Olympic Games) including the more recent Duqu and Flame virus.... can Google clarify if through its detailed analysis as well as victim reports if Google will apply the same standards and warn end-users of these domestic state sponsored attacks as well? Or are exceptions of convenience made in these cases due to the close and special ties that Google has with the US intelligence agencies and the confirmed but secret and classified collaboration that the Google has with the CIA and NSA in regards to GMail and Google Accounts? said... It's from the PRCPeople Republic of China Julieta Lionetti said... Google, I'm impressed by you going out on a limb so far. I applaud this warning and will help spread the word. Well, you are not being evil, after all. said... Non US sponsored attacks - right ?? Tenpa Gurmey Khangsar said... I THINK THEY ARE TAKING ABOUT CHINESE GOVERNMENT said... On a lighter note, hikingfan lives a more interesting life than I figured if he's attracted the attention of state actors. said... I believe it should be at a macro level by determining how many users will be affected by same pattern etc.. (using complex methods like geography, type of users, area of attack and so on..)regardswww.diaryfolio.com said... I think it's good to warn users of suspicious activities, but my guess is that there also are activities like US surveillance that will not be announced, because of local court orders. Google is in no way independent. said... Will Google alert users possibly infected by other types of malware than DNSChanger and not connected with certain .gov-targeted attacks?For example i'm infected with some type of rootkit, which added my PC to botnet. My AV system doesn't alerts me - do Google system will alert me? said... ...good step in the right direction, if and only if there would be no bias with respect to the states behind the attacks... Dave Watts said... @Adrian: no, I'm pretty certain that this is simply identifying known or likely items within an email that you receive.@eroei1021: given that Stuxnet, Duqu, Flame do not, to the best of my knowledge, rely on phishing emails as a delivery vector, this would not apply to them. Fellow Traveler said... This entire page requires a premise that states do not act for our good -- but that they instead often act maliciously. What steps can we take to insure that authorities and majorities are not able to trample on our rights to life, liberty, and property? said... "We can't go into the details without giving away information that would be helpful to these bad actors ..." and we would never dream of sharing and technical insights that might help the competition provide you the same level of security as we do, that would affect our bottom line. Right?Oh, and could you please get one of your writers to pick a dictionary and use a slightly more specific qualifier than 'bad' for the actors? What is 'bad' anyway? Sure Google is a young high tech company, but dismissing 2000 years of research into human morality by using such childish language : 'the good guys vs. the bad guys' is way below the level of maturity we've come to expect out of google. said... With Makaseh (makaseh.wordpress.com) this will not possible. Data can only be exchanged with the makaseh ids created. Data intercepted, copied or shared without authorization by the originator cannot be viewed and any attempt to break it, will send a cautionary note to the originator with the ip address, email details etc. Repeated attempts may even lead to the deactivation of the culprit userid. said... If self promotion is shameless, how about companies that intrude privacy, steal information from data stored and use it for profit. DonFphrnqTaub Persina ; hopiakuta ; kutahopia ;... said... « state-sponsored »‽ Florida, Iran, North Korea‽This captcha is not disability accessible. said... Given that you provide a similar service for detecting improper email access, I'd be concerned. I've seen a quite definite fail of that service with my mother's GMail account. Apparently someone was remote accessing her account using an email program (not a browser) to comb her contacts and send spam. We are in the Central U.S.A. Her account IP log showed the two hits from someone in Mexico, yet the service did not detect, or flag, this irregular IP address. Ellie K said... @AvelWorldCreator: That is a good point. I am familiar with that light blue framed page from Google Gmail. It provides a record of IP addresses and approximate locations, at a country level (and for the U.S., at state but not city level) from where one's account was recently accessed. About a year ago, I received an email from Google Gmail, advising me that there may have been some unusual recent activity on my account. It was mildly worded, nothing about powers of a foreign nation or such. Indeed, there was multiple access from 2 different IP's in Iran via IMAP or POP, and 3 from Arizona, via browser. All were within a 24-hour interval. I have never accessed Gmail from anywhere other than Arizona, so it was a good catch by Gmail. On the other occasion, I did not receive any warning. I had just happened to check the same unusual activity link, which often resides at the footer of my Gmail inbox screen, even when all is well. Reddit offers a similar feature, in fact. So anyway, I was curious, given the Arizona-and-Iran incident of a few weeks prior. I was surprised to find a pattern of access, in alternating sequence, at less than 60 minute intervals, between my Arizona IP address and one in Washington State. Once again, Arizona access was by browser, and the other IP via IMAP. I tracked the latter to Amazon dot com's legal department. I never found out why they (or someone using EC2 or AWS perhaps?) would be reading my email. Nor did Google flag this as unusual activity. I took screen shots, both times, but have no idea who to send it to. Or if Google would even consider it pertinent. I can't imagine why anyone, whether Iran or Amazon dot com, would want to access my boring and inconsequential information. Botnet perhaps, for spam purposes? Well, not by Amazon!@Eric Grosse of Google Security Engineering: What is the difference is between the IP notification screen that I just alluded (at excessive length) and this new notification? Yes, I realize that they appear in different places, and have different wording. But does the Gmail-related anomalous IP message have any relationship to, or is it indicative of, the same problems flagged by this new message i.e. if I am afflicted by one problem, am I also compromised by the other? Jacob Lageveen said... This is great news. Thank you google for helping us combat these perpetrators. Tim Smythe said... I saw this security warning the other day and i was baffled to say the least. It was right after I was looking at home security systems reviews online too. What a coincidence. said... Jenna Coleman said... a leading security system company in Delhi, offering all security products for residential and commercial use. #### ## Archive ## Feed Give us feedback in our Product Forums. (meta data) TITLE: Google to warn users of 'state-sponsored attacks' - Technology & Science - CBC News 44 captures 10 Dec 2015 - 04 Jun 2022 About this capture COLLECTED BY Organization: Internet Archive Global Events Collection: End of Term 2016 Press This is a collection of press articles about the End of Term 2016 project. End of Term is a collaborative project to preserve public United States Government web sites at the end of the current presidential administration ending January 20, 2017. The Wayback Machine - https://web.archive.org/web/20161231165126/http://www.cbc.ca/news/technology/google-to-warn-users-of-state-sponsored-attacks-1.1164945 ## CBC News Technology & Science ## CBC News Navigation Technology & Science Technology & Science Quirks & Quarks Blog Photo Galleries # Google to warn users of 'state-sponsored attacks' ## CBC News Posted: Jun 06, 2012 10:47 AM ET Last Updated: Jun 06, 2012 10:50 AM ET A Chinese national flag waves in front of the former headquarters of Google China in Beijing. Google closed the headquarters in 2010 after a series of hacking attacks traced to China. It has now said it will start flagging suspected state-sponsored attacks to its users. (Jason Lee /Reuters) ### Related Stories Google flags censored search words to Chinese users Newly discovered malware most lethal cyberweapon to date Creating undetectable computer virus 'surprisingly simple' Google said Wednesday that it has added a feature to warn users whose accounts it believes are targets of "state-sponsored attacks," but the internet giant did not cite a specific government. Google Inc. closed its search engine operations in China in 2010 after saying it no longer wanted to co-operate with Beijing's internet censorship following hacking attacks traced to China. A message that says "Warning: We believe state-sponsored attackers may be trying to compromise your account or computer" will appear onscreen if users are targeted, Eric Grosse, Google's vice-president for security engineering, wrote on a company blog. Google cannot say how it knows activity is state-sponsored without giving information that would help attackers, Grosse wrote. But detailed analysis and victim reports "strongly suggest the involvement of states or groups that are state-sponsored," he wrote. ### State hackers target commercial data A report in November by U.S. intelligence agencies said Chinese and Russian intelligence services and companies with state ties systematically break into U.S. computer systems to steal commercial information. Western security experts say China's military is a leader in cyberwarfare research. Beijing has rejected suggestions by Western security experts that its military or government agencies were involved in the Google hacking. But it has not responded publicly to appeals by U.S. Secretary of State Hillary Rodham Clinton and other officials to help investigate hacking attacks. Google's latest move comes after the company added a feature to its Chinese-language search engine in Hong Kong last week that warns users in China who enter search keywords that might produce blocked results. It highlights which terms might trigger filters, challenging official Chinese efforts to conceal censorship. Google's 2010 announcement that it was closing its search engine in China said email accounts of human rights activists critical of China had been hacked. The company said some of its intellectual property also was stolen in a separate attack that targeted at least 20 other large companies. Last year, Google said computer hackers in China broke into the personal Gmail accounts of several hundred people, including senior U.S. government officials, military personnel and political activists. That intrusion was based on less sophisticated trickery used to obtain passwords and other information. ### Stay Connected with CBC News ### Top News Headlines 'An incredible chess move': Putin checkmates Obama after symbolic sanctions manoeuvre Happy New Year? Here's how changes coming Jan. 1 will affect your wallet New Year's Eve: Revellers bid adieu to year of conflicts, celebrity deaths B.C. avalanche dogs can sniff out people buried under the snow Canada vs. U.S.: 'The story is there, we've got to write it' ### Latest Technology & Science News Headlines Celebrating New Year's? You'll have to wait an extra second NASA asteroid-hunting project spots new comet — and maybe a 2nd Apple to cut iPhone production in Jan-March quarter: report New research may offer hope for post-traumatic stress treatment Nothing amiss in environment where scores of sea creatures washed up dead ### Quirks & Quarks The Top Science Stories of 2016 Earth's future, Driving with no hands, Looking for aliens ### Most Viewed NASA asteroid-hunting project spots new comet — and maybe a 2nd Celebrating New Year's? You'll have to wait an extra second New research may offer hope for post-traumatic stress treatment New prehistoric bird species identified in Canadian Arctic Cassini sends back 1st images from new orbit around Saturn Want to delete your internet presence? New tool aims to help you vanish The science of studying: How students can put their brains to best use Avoid applying Vicks VapoRub to babies, pediatricians say Scientists explore why time flies when you're having fun Victoria Kaspi, neutron star researcher at McGill, wins $1M Herzberg medal ### Don't Miss How Canadians are keeping Black Lives Matter website online The Current Fun and games: Why we should take time to play Scientists measure antimatter atom for 1st time Climate change as seen from space: Bob McDonald Who would want access to 1 billion Yahoo accounts? Canadians couldn't stop Googling Drake, Trump in 2016 A tech company that cares — now that would be innovative 'This game is not over yet:' Arctic researcher has hope we can turn corner on climate change Snapchat, Skype, BBM not protecting users' privacy, says Amnesty International 'Invulnerability illusion' leaves younger people exposed to web frauds WW1 U -BOAT Engineers stumble on WWI German submarine sunk by 'sea monster' Study explains why tomatoes lose their flavour in the fridge Rigorous rules proposed for recreational drone flyers, documents show Rockstar Games announces Red Dead Redemption 2 for fall 2017 release Rural reboot: Salinas, Calif., turning crop pickers into computer programmers
train45574
Gmail
Security.:History.
Google has supported secure HTTPS since the day it launched. In the beginning, it was only default on the login page, a reason that Google engineer Ariel Rideout stated was because HTTPS made "your mail slower". However, users could manually switch to secure HTTPS mode inside the inbox after logging in. In July 2008, Google simplified the ability to manually enable secure mode, with a toggle in the settings menu. 
 In 2007, Google fixed a cross-site scripting security issue that could let attackers collect information from Gmail contact lists. 
 In January 2010, Google began rolling out HTTPS as the default for all users. 
 In June 2012, a new security feature was introduced to protect users from state-sponsored attacks.