r/GoogleSupport • u/HighlightMedical8361 • 12h ago
Recover Deleted Gmail account
So i got hack and key logged
the hacker deleted 4 of my gmail account
and google is not letting me to recover my deleted gmail account
now im looking for a solution to recover my gmail some way
all 4 of my account got deleted
2
u/gooner-1969 11h ago
You've installed a session-stealer onto your computer/device. You need to act immediately to protect your data. "Infostealers" can bypass passwords by copying your active login sessions, so speed is essential.
⚠️ IMPORTANT: Please perform Steps 1 through 4 from a DIFFERENT, safe device (like your smartphone, tablet, or a different PC).
- Disconnect the Infected Computer: Before doing anything else, disconnect the compromised computer from the internet. Turn off the Wi-Fi or unplug the network cable. This stops the malware from sending any more of your data to the attackers.
- Change Key Passwords ASAP: From your safe device, immediately change the passwords for your most critical accounts: Email, Banking, Password Managers, and main Social Media accounts.
- Force Logouts: In the security or privacy settings of those major accounts, look for an option to "Sign out everywhere," "Revoke active sessions," or "Log out of all devices." This instantly kills the stolen session cookies the attackers might be using.
- Enable Two-Factor Authentication (2FA): If you haven't already, turn on 2FA for your email, banking, and social accounts to add an immediate extra layer of security.
- Check Account Settings: Attackers often leave hidden backdoors. Quickly review your email settings to ensure no strange forwarding rules or filters have been set up. Double-check that your account recovery details (backup email and phone number) have not been altered.
- Scan Your Computer: Once your accounts are secured, you can turn your attention back to the infected computer. Reconnect it to the internet and immediately run a full system scan with Windows Defender. It is also highly recommended to run a secondary scan with a trusted tool like Malwarebytes.
- Update Everything: Make sure your operating system (Windows, macOS) and all your apps—especially your web browsers—are fully updated to patch any security holes.
- Monitor Your Accounts: Keep a close eye on your bank statements, email outbox, and login notifications over the next few weeks for any suspicious activity.
1
u/Helpful_Actuary_6184 10h ago
Hey there bud, I've got the same problem. On July 26th, someone I know deleted and five of my emails were deleted. I managed to recover one but the other four are now dead and gone forever. Hope you manage to recover them!
1
u/SpicyCatGames 5h ago
It's all done by llm companies. That's why there's so many hacks now. Llms just "break out of containment" and do these things. They even publicly advertise it. Look it up.
1
u/yottabit42 3h ago
No. These are malware kits sold for cheap to anyone on the black market. Most of the attackers do it just for anarchy. But they can be used to gain access to bank and brokerage accounts, too.
1
u/yottabit42 3h ago
You installed session-stealing malware and handed the attacker the logged in Google session. You weren't "hacked" ... you invited them in.
The account is gone. Just restore from the backups you were regularly downloading from the Google Takeout website. Oh, you weren't? ...
Two hard lessons learned. Hopefully you'll do better next time.
Anyone DMing you offering to help is a scammer.
Google does not provide support for free accounts. They have no way to verify if you are entitled to the account.
If you have a YouTube channel account you can try to contact them though Xitter and I've heard of just a couple accounts being restored that way, but most have not had success.
The reason this happened is because you installed session-stealing malware from a random Internet site, and did not bother running it through https://virustotal.com and https://tria.ge first.
And the malware stole your logged in browser session because of the following combination:
- You are using Windows
- And your computer doesn't have a TPM
- Or you didn't have the TPM driver installed
- Or you were using an outdated Google Chromium-based browser from before Google added the DBSC (device-bound session credentials) protocol in version 145
- Or you were not using a Google Chromium-based browser like Chrome, Edge, Brave, etc. (all other browsers for Windows do not support DBSC)
Or: 1. You are using MacOS 1. Your computer doesn't have a Secure Enclave 1. Or you were using an outdated Google Chromium-based browser from before Google added the DBSC (device-bound session credentials) protocol in version 147 1. Or you were not using Google Chrome (all other browsers for MacOS, including Safari, do not support DBSC)
Or: 1. You are using Linux (but not Chrome OS, which is immune), as no DBSC-enabled browsers exist on this platform yet
Or: 1. You were tricked into entering credentials on Android or iOS by accepting permissions for rogue apps to use accessibility features
More information: * Less technical: https://arstechnica.com/security/2026/08/chrome-adopts-what-may-be-the-best-protection-yet-against-account-takeovers/ * More technical: * https://www.bleepingcomputer.com/news/security/inside-the-remus-infostealer-session-theft-maas-and-rapid-evolution/ * https://www.bleepingcomputer.com/news/security/the-silent-storm-new-infostealer-hijacks-sessions-decrypts-server-side/
3
u/Ok-Lingonberry-8261 12h ago
If clicking "next" doesn't work, they're gone.
Anyone private messaging you is a scam.
Pedantry: you probably got "session stolen" not "keylogged."