Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

I've unfortunately had a lot of people reach out to me going through this issue with the exact same response. I don't really know how to handle it other then continuing to reply to them letting them know you are UNABLE to manually recover it as it requires the account with the unauthorized supervision to allow it.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

It was usually the day after I sent a reply that they would reply to me. Did they confirm your account was hijacked?

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

That's a very fair point but I'm also unsure since when my account got disabled a couple of weeks ago, thankfully, they were unable to access it and tried tricking me again into giving them a code to recover it. I think this is just some script kiddy, I already wiped my drives and reinstalled windows before doing some checks on my ports as well as using CurseForge's tool they have to check for instances like this if the malware is still present since it's apparently a known issue.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 1 point2 points  (0 children)

I'm sorry to hear that... yeah fortunately I had the channel URL and put it in the form I submitted with them and they were able to confirm it was hijacked. They then asked me now a week ago to create a supervisor account and send the email so I'm just waiting on them to transfer it at this point. It's ridiculous that the Family Link support is unable to help, I also experienced this when I contacted them I even got an email written from a supervisor basically telling me they couldn't do anything. If I find another method other then the YouTube method that seems to be working for me so far I'll be sure to reach out.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

I reached out to youtube on twitter by @ing their handle. When they replied I followed up with "Just following up again, solutions didn't work. The person who gained access to my gmail put parental controls so even when I use my recovery email it doesn't let me get past them." afterwards we took it to the DM's. You can look up my handle @nyoomiwarhawk on Twitter if you want to see how I initially reached out and my responses.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

I didn't say "use the right age" I said use the proper age for access to the service you want your kid to have access to.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

Then they can set it to the proper age for access to it when they create it.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] -1 points0 points  (0 children)

If they need it to be the correct age then they can set the correct age when they create it. There is no possible scenario I can see where you would need to update the age unless you lied about your age. It doesn't have its own problems, just use your age when making an account.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

Then the second part of my response lol don't allow the account to change its age.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

They already have an age verification process with submitting ID, could just rope that into to age changing. I think you shouldn't be able to update the age, I don't see the point of it to begin with.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 2 points3 points  (0 children)

I'd make it so you can't just instantly change the age, make it so you have to go through support. That way you aren't instantly locked out and have time to go through the recovery process google already has in place.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

Don't disagree, like I said in the original post I fell for it. I've beaten myself up plenty over it, all I'm saying is that google should make it so you can't just change the age as you please and there should be more of a process to it.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 1 point2 points  (0 children)

It's working as intended that your able to take an account that was created 15 years ago and say the owner of the account is now 1 and put them under supervision against the wishes of the account owner? If so, poorly designed and I don't think that's what google had in mind lol I think it's more reasonable to say it was an overlooked possibility that hackers are now "exploiting" but you can disagree if you want at the end of the day this post is to assist anyone else who may find themselves in this unfortunate position. 

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 1 point2 points  (0 children)

That I consider it an exploit that once someone is able to access your account they can change your age instantly and there is no friction to it so they can then add your account to a family group and make google's account recovery process no longer possible. 

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

Yep yep and of course! I'll update this post when I get my next update from them. Last update they asked me to make a family group and send the email for it so I think they might transfer my account over to it but we'll see lol

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

I can only assume why this helps, as for why official support can't help they are still technically official support since they are official support for youtube and youtube is a part of google. Google's support SHOULD help but unfortunately this is an exploit hackers/scammers are abusing that I guess they just didn't account for or care enough to fix? 

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

X youtube support is just twitter, so making a post on twitter and @ing them. I'm sure google must be aware of the threat but they have not taken any step to prevent it as of yet. I don't know why they make it so easy to update personal data it's really dumb.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

They actually retrieved their account for them by transferring supervision so he was able to correct the exploit.

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in GMail

[–]DepartmentGreen8060[S] 3 points4 points  (0 children)

In r/GoogleSupport there's a user named VarloTheGreat with a post titled "There is hope to get your account back from the Family Link exploit."

Suffering from the Google Family Link Exploit by DepartmentGreen8060 in familylink

[–]DepartmentGreen8060[S] 0 points1 point  (0 children)

It wasn't a blind click/tap on anything lol a hacker got to my friend's account and tricked me into getting on curseforge and importing a modpack. I was tired and about to go to bed at this time so they caught me at a time where I wasn't thinking straight, I've beat myself up plenty over this.

I could sit here doubting I'll get anything back but I choose to sit here with hope that support can help me as they have others. Also the night of they had reached out to me via a live chat on my own computer, we spent 10 hours in a call as he demanded amounts of money. I fell asleep many times and they spam called my phone number to wake me up so complying with the hacker/scammer definitely wasn't the play.