Update from Gmail team on security

Gmail team has responded to Gmail security problems reported at makeuseof.com and elsewhere, apparently Google has done some security checks and found no evidence of vulnerability in Gmail.

With help from affected users, we determined that the cause was a phishing scheme, a common method used by malicious actors to trick people into sharing their sensitive information. Attackers sent customized e-mails encouraging web domain owners to visit fraudulent websites such as “google-hosts.com” that they set up purely to harvest usernames and passwords. These fake sites had no affiliation with Google, and the ones we’ve seen are now offline. Once attackers gained the user credentials, they were free to modify the affected accounts as they desired. In this case, the attacker set up mail filters specifically designed to forward messages from web domain providers.

To keep your account secure you can turn on always https option in Gmail. While logging in always check the URL starts with https://www.google.com/accounts. Frequently check your Gmail filters for entries other than you added yourself.