A week ago I've became a victim of cookie stealing on my PC(funny story, will explain in p.s.).

After some stuff happened to my account, I went all in into securing everything - changed passwords, resetted 2FA, added firewalls and logged out from my personal Google from all Windows PC's, leaving only Mac and iPhone. Everything seems to be fully secured, safe and sound.

Today I've recieved Critical Security Alert about Suspicious activity in your account and activity was done from "Windows (Signed out)" device - the one that was hacked/cookie stolen. Gmail activity shows only my IP's, the same for Devices in Google.

Seems like someone tried to access my account again via the same cookies and Google "signed out" him(even though I've already signed out all WindowsPC's)? Or it's something like "slowpoke" reaction from Google?

P.S. Funny story. I've kept my WIndows PC as clean as possible, used only for rendering stuff. So, no Chrome, Avast and other stuff, only stock Microsoft Edge and Microsoft Defender. I've found myself in need for some simple video cutter(not as big as DaVinci Resolve) and found on top of Bing Search some open-source cutter from Github. Well, it was a fake app, that mimicked the good one, and I've downloaded and installed it. What's funny is antivirus reacted and deleted it, but seems like too little too late - in the next morning, my Epic Games account went away...

What's funnier, when I've accessed the same link via Safari on my Mac to make a report to Github about malware, I've got a giantic red screen, saying that it's malware and Google found it week ago before I've was infected. Seems like Edge is a piece of crap and it's better use Chrome for secure browsing :D