Find out if your Google account has been hacked

Check to see if your Android device has been hit by Gooligan and what to do if it has.

Matt Elliott Senior Editor

Matt Elliott is a senior editor at CNET with a focus on laptops and streaming services. Matt has more than 20 years of experience testing and reviewing laptops. He has worked for CNET in New York and San Francisco and now lives in New Hampshire. When he's not writing about laptops, Matt likes to play and watch sports. He loves to play tennis and hates the number of streaming services he has to subscribe to in order to watch the various sports he wants to watch.

Expertise Laptops, desktops, all-in-one PCs, streaming devices, streaming platforms

See full bio

Matt Elliott

Nov. 30, 2016 12:07 p.m. PT

Watch this: Over a million Google accounts compromised by malware

01:09

The Gooligan malware attack targeting Android devices has infected more than a million Google accounts and growing by 13,000 new users a day. It affects devices running Android 4 (Jelly Bean, KitKat) and Android 5 (Lollipop), according to Check Point.

Gooligan spreads via apps from third-party app stores and malicious links in phishing attack messages. It downloads a rootkit to steal authentication tokens to breach data from Google Play, Gmail, Google Photos, Google Docs, G Suite, Google Drive and other programs. It also installs app that can steal your account information to post fake ratings and reviews to raise the profile of these apps.

Has your account been compromised? It's easy to check to find out.

Check your account at Check Point

Head to the Check Point website and enter your email address. It will immediately let you know if your account has been breached.

You can also scroll to the bottom of this blog post from Check Point to see a list of dozens of apps known to be infected by Gooligan. To see if you have any of these apps installed on your device, go to Settings > Apps for an alphabetical list.

What to do if you have been hacked

If your account has been breached, you will need to wipe your Android device and perform a clean installation. Afterward, you will need to change the password for your Google account used with the device.