Database Users

Inability to access google account

I went to sleep last night awaiting my first day at sixth form. My G1 was going to be there for internet browsing whilst looking for information (school intranet is very unreliable) but I woke up with a slightly different issue. An ! mark. Turns out somebody had hacked my google account overnight and changed my password. i can now no longer access any google features, including any synced things on the phone, all because of some pesky hacker (of course not aimed at the wonderful 'hackers' on here such as drizzy, twisted, cyanogen, jac etc).
However, I only have one email address so I did not provide an alternate, and to reset my password requires me to know the date i started using my account, which I haven't got a clue. Does anybody know what I can do in this position? Thanks a lot
Tucka

tucka20 said:
I went to sleep last night awaiting my first day at sixth form. My G1 was going to be there for internet browsing whilst looking for information (school intranet is very unreliable) but I woke up with a slightly different issue. An ! mark. Turns out somebody had hacked my google account overnight and changed my password. i can now no longer access any google features, including any synced things on the phone, all because of some pesky hacker (of course not aimed at the wonderful 'hackers' on here such as drizzy, twisted, cyanogen, jac etc).
However, I only have one email address so I did not provide an alternate, and to reset my password requires me to know the date i started using my account, which I haven't got a clue. Does anybody know what I can do in this position? Thanks a lot
Tucka
Click to expand...
Click to collapse
You can wipe your phone and create a new account. Then in the mean time just email google and see what they can do for you.

yep, thats an option. however I have purchased numerous apps (copilot being the most expensive) that are linked to the account and that I will lose.
Also, I emailed them and they said I didn't provide enough information on my account to get it back. How the hell am I supposed to know the dates I started using 1. the account 2. youtube 3. Google calendar?
Why not just provide me with a security question?

tucka20 said:
Why not just provide me with a security question?
Click to expand...
Click to collapse
I'm wondering if you are interacting with a real Google password recovery page. From my account page the only password recovery options are:
- Secondary email (optional)
- SMS (optional)
- Security question
At no point does it ever indicate it would recover my password using something as arcane as the date I first started using Google services. By the way, I highly recommend the "Write my own question" option for the security question. Choose a question that describes a very particular characteristic of one of your heirloom or keepsake possessions.

https://www.google.com/support/accounts/bin/request.py?ara=1&hl=en&contact_type=ara&ctx=ara
Besides a secondary email account (which i don't have) it is not possible for me to do this! I am really pi*sed off with google at the minute, and am considering selling the G1 because of this. I am an ebay seller with items currently on and use my gmail address with confidence for that account, and unfortunately I can now no longer send/ receive emails to customers. THANKS A LOT GOOGLE

tucka20 said:
https://www.google.com/support/accounts/bin/request.py?ara=1&hl=en&contact_type=ara&ctx=ara
Besides a secondary email account (which i don't have) it is not possible for me to do this! I am really pi*sed off with google at the minute, and am considering selling the G1 because of this. I am an ebay seller with items currently on and use my gmail address with confidence for that account, and unfortunately I can now no longer send/ receive emails to customers. THANKS A LOT GOOGLE
Click to expand...
Click to collapse
Any reason why you couldn't recover using the regular account recovery screen? It should use your security question.
I'm not sure why you're angry at Google, when your own computing practices are what probably caused your account to be exploited (probably weak password or trojan installed a keylogger)? Regardless, Google is just practicing normal due diligence for account recovery. Account recovery has to use information that only you know (and which you possibly might not even know yourself).
If you're concerned about your eBay sales, go into your eBay preferences and change your registered email.

I dont have another email address, and have no intention of creating a new one! My password is a mixture of numbers and letters (UPPER and lower case) and I have a separate laptop that handles ebay sales so the only thing that the laptop accesses is ebay website/paypal/gmail and its running linux.
The only other time i use my gmail account is on my g1.
The reason I am angry is because this is the only company I have ever seen with security measures this tight! Even when a friend lost his paypal password it was a simple DOB/ security question thing.
I go to recover password, and it asks for my email address. I then type it, and it tells me I don't have a secondary address to receive my security question and to fill in the form posted above. That is all I get, no security question!

tucka20 said:
I dont have another email address, and have no intention of creating a new one! My password is a mixture of numbers and letters (UPPER and lower case) and I have a separate laptop that handles ebay sales so the only thing that the laptop accesses is ebay website/paypal/gmail and its running linux.
The only other time i use my gmail account is on my g1.
The reason I am angry is because this is the only company I have ever seen with security measures this tight! Even when a friend lost his paypal password it was a simple DOB/ security question thing.
I go to recover password, and it asks for my email address. I then type it, and it tells me I don't have a secondary address to receive my security question and to fill in the form posted above. That is all I get, no security question!
Click to expand...
Click to collapse
Looks like your stuck getting another email address and trying to work up the Cust. Serv. chain at google...

tucka20 said:
I dont have another email address, and have no intention of creating a new one! My password is a mixture of numbers and letters (UPPER and lower case) and I have a separate laptop that handles ebay sales so the only thing that the laptop accesses is ebay website/paypal/gmail and its running linux.
Click to expand...
Click to collapse
That does sound like a pretty secure setup.
Well I guess the best you can do is just try filling out that password recovery form. It doesn't appear that dates for the times you first started using specific Google services is necessary. Worst case scenario you could just guess. Since you already don't have any access now, I reckon you have nothing to lose. Good luck!

my google + account is suspended

my account is temporarily suspended for violating the community standards, which I have no idea what does it mean.
apparently, every account without real name will be suspended sooner or later. according to Google discussion board, large number of people is facing this problem now, especially those with names like mine (sony ericssone community), iphone, XDA ...etc. please read the following
http://www.google.com/support/profiles/bin/answer.py?answer=1228271
so I had to change my name to my personal name and ask for appeal and wait for them to reactivate my account. this seems to be stupid for me. if we want to make group or something, what should we do???? and where is the openness that google keeps mentioning in each of their articles?????

I finally found the answer, if you want to have any of the groups names, you need to have a business account, which as you all know is not available yet, so you need to wait

yes, all non standard name accounts will be shut down
which i think is something else that is a +1 over facebook. you don't have a million different crappy little pages pestering you all day long.

just create a hangout...
then add it here. http://gphangouts.com/

too bad, i enjoy your daily news.
and hangout is not work on phone, which there's huddle which not working on computer.

thanks alot
I will be back as soon as they reactivate it

Hi everybody
my account is finally reactivated after I changed my name. I wish xda change their name before they get suspended as well.
we are currently over 250 members and everyone is wellcome
here is my link
https://profiles.google.com/113070422033274639984

Admob disabled account

Hello developers,
I don't know if i am at the right place for this but maybe there is someone that can help me.
I've been using admob for the last half year or so and was finally making some money with them. Now last week i was not able to log in to my admob account. Only this message will appear when i try to log in:
Your account has been disabled for invalid activity or repeated policy violations. Some examples include recurring manual clicks or impressions, violation of our content policies which can be found here, robots, automated click and impression generating tools, third-party services that generate clicks or impressions such as pay-to-click, pay-to-surf, autosurf, and click-exchange programs, or any deceptive software. If you have any questions or concerns about the actions we've taken, how you can appeal this decision, or invalid activity in general, you can find more information here.
I've no idea why they would disable my account? I've really NEVER clicked my own ad? How can they just disable my account without sending me a mail or something? I already searched on google, and found a lot off people with the same problem. Some of them got their account back randomly, and some of them just lost all of their money on their accounts. My account was disabled 2 days before the payout was scheduled, which would have been 500$. I feel really sick about this because after all the hard work i get nothing. Now I don't feel like getting my account back because they don't respond to any mail or appeal i send them.
I am trying some other ad networks but they dont pay as much as admob did. I running one app on Revmob (0,00 ECMP with 2000 impressions a day??) one on mmedia (about 0,25 ECPM with 2000 impressions daily) and one in appbrain (0,40 ECPM with 500 impressions). I am currently only using banner apps. I got a ECPM of 1,10 with admob.
So I would like to know which ad networks you guys are using and what their ECPM is on banner ads. Also had anyone of you experienced the same with admob and how did you handle it?
Sorry for my maybe bad english since its not my native language.

kortenoeverdev said:
Hello developers,
I don't know if i am at the right place for this but maybe there is someone that can help me.
I've been using admob for the last half year or so and was finally making some money with them. Now last week i was not able to log in to my admob account. Only this message will appear when i try to log in:
Your account has been disabled for invalid activity or repeated policy violations. Some examples include recurring manual clicks or impressions, violation of our content policies which can be found here, robots, automated click and impression generating tools, third-party services that generate clicks or impressions such as pay-to-click, pay-to-surf, autosurf, and click-exchange programs, or any deceptive software. If you have any questions or concerns about the actions we've taken, how you can appeal this decision, or invalid activity in general, you can find more information here.
I've no idea why they would disable my account? I've really NEVER clicked my own ad? How can they just disable my account without sending me a mail or something? I already searched on google, and found a lot off people with the same problem. Some of them got their account back randomly, and some of them just lost all of their money on their accounts. My account was disabled 2 days before the payout was scheduled, which would have been 500$. I feel really sick about this because after all the hard work i get nothing. Now I don't feel like getting my account back because they don't respond to any mail or appeal i send them.
I am trying some other ad networks but they dont pay as much as admob did. I running one app on Revmob (0,00 ECMP with 2000 impressions a day??) one on mmedia (about 0,25 ECPM with 2000 impressions daily) and one in appbrain (0,40 ECPM with 500 impressions). I am currently only using banner apps. I got a ECPM of 1,10 with admob.
So I would like to know which ad networks you guys are using and what their ECPM is on banner ads. Also had anyone of you experienced the same with admob and how did you handle it?
Sorry for my maybe bad english since its not my native language.
Click to expand...
Click to collapse
Have you solve this problem?
I heard about this issue with other mobile ad networks (some reviews here: http://topmobileadnetworks.com/), but not with AdMob
I don't know If you tried to send an email at [email protected].
Good Luck!

did your app have anything in it that could be copyrighted? Or do you think it was too many clicks?

If you violate Admob or Google policy, your account will be terminate without notice.
Please check and read all policy or you can post your app here so some one can check for you.

toi1em said:
If you violate Admob or Google policy, your account will be terminate without notice.
Please check and read all policy or you can post your app here so some one can check for you.
Click to expand...
Click to collapse
I think it was because there were too many clicks (not from me of course) on the day my account got disabled, i noticed a very high click trough rate (about 3 times more than other days). It was on this application: com.kortenoeverdev.zaklamp
I feel like someone wanted to get me banned or something and intentionally clicked the ad multiple times.

kortenoeverdev said:
I think it was because there were too many clicks (not from me of course) on the day my account got disabled, i noticed a very high click trough rate (about 3 times more than other days). It was on this application: com.kortenoeverdev.zaklamp
I feel like someone wanted to get me banned or something and intentionally clicked the ad multiple times.
Click to expand...
Click to collapse
If your app still on Google Play, I think you get banned by fake click. You can try contact Admob, if still can not solve, better try other Ads provider.

If my Admob publisher account gets banned, what happens to my Google Developer account? Will it get banned too?

Yes they do that frequently
I has a very rare chance for your admob account to get succeeded at the first time. I tried with it more than 8 times. Most of the time they quit my account without any notice. That the nature of google. So my main advice is to go for alternate ad networks.
If you are a android developer there are many alternatives
- Tapjoy
- Airpush
- tapgage
Some of them have higher ecpm than to admob. So try them
:angel:

I got the same problem too I can't take back my account. I was more lucky than you that my account only had $300. I was confused about starting a new admob account or use another one. The incident made me wonder: "should I always depend on Admob?".
So I decide to combine several Ad networks. It works. And I realize something about Admob:
Pros: It is reliable and has huge users database. Admob is backed by Google - a prestigious corporation who tracks every steps of anyone who use its service.
Cons:
- Its eCPM is low (I don't know exactly why but everytime I try another Ad network, they outperform Admob in terms of eCPM. I guess that Admob know it has advantages over competitors when it comes to reputation and users database, so It charge advertisers and publishers more)
- Its ban users more frequently. (Some of my friends' accounts got banned because Google thinks they was cheating, while infact he didn't. It was nearly impossible for him to reach Google support to recover his accounts).
after combining Admob and with Airpush, Leadbolt, StartApp, ChartBoost, I end up with Adsota - a lesser known ad network. Adsota is an has much higher eCPM, 100% fill-rate, variousa ads format, and swift payment. You can find it by googling "ads.appota".
Best of luck, mate!

Admob account closed abruptly. Help!

Help! My admob account was closed 2 days back all of a sudden without any warning or notice. My app was featured on AppGratis last month, and my admob account was shut down yesterday without any warning or reason.
My app has stopped showing ads altogether! I did file an appeal, but have not heard anything back in the last 2 days. How long till they get back to me? Which alternate ad networks are you guys using? HELP!!!!

oh now(
Google is very difficult to reach (if they have blocked your account , then there is nothing you can do ... Alternatively can use mophun or milennial media !

I got banned too, lost a $300 account. Sending lots of emails and appeals. Receive no explanation or answers. The incident made me wonder: "should I always depend on Admob?".
So I decide to combine several Ad networks. It works. And I realize something about Admob:
Pros: It is reliable and has huge users database. Admob is backed by Google - a prestigious corporation who tracks every steps of anyone who use its service.
Cons:
- Its eCPM is low (I don't know exactly why but everytime I try another Ad network, they outperform Admob in terms of eCPM. I guess that Admob know it has advantages over competitors when it comes to reputation and users database, so It charge advertisers and publishers more)
- Its ban users more frequently. (Some of my friends' accounts got banned because Google thinks they was cheating, while infact he didn't. It was very difficult for him to reach Google support to recover his accounts).
after combining Admob and with Airpush, Leadbolt, StartApp, ChartBoost, I end up with Adsota - a lesser known ad network. Adsota is an has much higher eCPM, 100% fill-rate, variousa ads format, and swift payment. You can find it by googling "ads.appota".
Best of luck, mate!

Google Account Hacked - New Joying Head Unit

I had the Google account login issues that many had in here, after contacting Joying they sent me a link to two changed files to copy onto their original firmware update. I updated with this new "firmware" and my Google account worked.
Then 2 days later (March 16th 2021) my Google account was compromised for the first time in 15 years. I only use this password for my Google account so I don't know how it was hacked but the Google Admin audit logs say the hacker just input my password.
They opened up a Google Adwords account and started selling fortnight ads, then attempted to get into my brokerage account, then logged into a dormant Etsy account and tried to do something with Square before I caught on (40min total in my account). They were quickly deleting any account change emails that came in so I wouldn't receive notices of changes.
I am highly suspicious of this new update to my head unit. The timing is spot on, and I haven't used my Google account anywhere other than my Pixel phones, Nvidia Shield, Laptop and this Joying unit.
I am very concerned now about the security of this device. I also don't understand the claim by Joying that "Google updated their servers" and that's why their firmware wasn't working with Google accounts. Smells very fishy to me, and I hope somebody that knows more about device security can help figure this out. I still have copies of the update that they sent me, but I will not be using this brand new head unit anymore with my Google Account.
I posted this thread because I have seen other comments about Google accounts being hacked and concerns about third party device security and thought it would be best to consolidate them here in one thread rather to take other threads on a tangent.

Just be aware that Joying in particular didn't have anything to do with it, they are just resellers and pass on software given to them by the actual manufacturer of the hardware, FYT. Also be aware, that data breaches are happening very often nowadays so that is also a possibility. I'm not defending the manufacturer in any way, but there's too many variables in order to single out the headunit itself. You did mention that you use this google account on your phone as well. It could be that you installed an app on your phone that stole your account information as well. Also a new "virus" has been discovered that disguises itself as a system update that can steal your info. Info here: https://www.androidpolice.com/2021/...retends-to-be-a-system-update-for-your-phone/
Only way to know for sure if it was the headunit itself is to use a new dummy Google account on it and see if it gets taken over as well. Also, I don't see the purpose of needing to login to Google on these devices anyways since we're not using them like phones and, me in particular, I don't consume streaming media on it so i don't give it network access at all. These new units have spotty GPS reception at best and sometimes i find myself forced to use Android Auto anyways so the only streaming media consumed is straight from my phone.
What I can recommend you do is install a firewall app on your headunit and monitor where it tries to connect and determine if it needs to access it or not. To put yourself at ease, I would change your password and enable 2 step authentication on your account.
Let us know if you decide to sideload a firewall app and post your results. With that info, we can take this concern up to Joying/Teyes/etc and have them press their supplier for information. I can assure you that with the proper evidence, the resellers will put some effort into fixing this wrongdoing, since they wouldn't want to tarnish their reputation and possibly lose out on some sales.

I was also hacked in mid March soon after installing a joying unit and connecting to my google account. The hacker opened a google ads account and used a credit card associated with my google account to charge 260 dollars to my visa. They would have charged more but my limit on the card is low for just this reason. Visa had to cancel my card and send me a new one. I never even connected the hack in my mind to the joying head unit until explorer_200 happened to post his experience, but this seems like far to much of a coincidence given that we both have had the same experience at the same time and all we have in common is the joying unit.
I agree that it may not be something joying knows about, but its probably a good idea to see how many have been affected by this hack. For now I will be setting up a locked down google account just for the joying box and my head unit will only be connected to apps that are no real risk to my passwords and personal data.
I need to login to google to use voice commands and google assistant as well.

explorer_200 said:
I posted this thread because I have seen other comments about Google accounts being hacked and thought it would be best to consolidate them in one thread.
Click to expand...
Click to collapse
Could you please link to these other comments. Right now there is just your say so which is a sample size of one. Not doubting what you are saying, but correlation is not necessarily causation.

6KayZee9 said:
I never even connected the hack in my mind to the joying head unit until explorer_200 happened to post his experience, but this seems like far to much of a coincidence given that we both have had the same experience at the same time and all we have in common is the joying unit.
Click to expand...
Click to collapse
That is flawed logic.
Allow me to use similar thinking in another way.
I notice that everytime I go outside when it is raining, there are people with umbrellas. I deduct that it is too much of a coincidence to see people with umbrellas when it is raining to think they are not linked. I don't see these same people carrying umbrellas when it is not raining. I can only conclude that the umbrellas are causing the rain.
You say that you and one other have the same head unit and have been hacked therefore it is the headunit's fault. DO a survey on how many people with Samsung phones were hacked yesterday and get back to me to let me know if the number was greater than two.
We can then move on from there.

Once bitten, twice shy... learn or get burned.
If you had a secure password that you managed well until 2 days ago that should narrow down your list of suspects substantially.
Time to take out the trash...
Results are all that matter; take out anything that might have been involved. The napalm method.
Overkill yes, but it's effective.
Breaching your Google account is completely unacceptable and I go nuts on anything/one that was potentially involved.

explorer_200 said:
I had the Google account login issues that many had in here, after contacting Joying they sent me a link to two changed files to copy onto their original firmware update. I updated with this new "firmware" and my Google account worked.
Then 2 days later (March 16th 2021) my Google account was compromised for the first time in 15 years. I only use this password for my Google account so I don't know how it was hacked but the Google Admin audit logs say the hacker just input my password.
They opened up a Google Adwords account and started selling fortnight ads, then attempted to get into my brokerage account, then logged into a dormant Etsy account and tried to do something with Square before I caught on (40min total in my account). They were quickly deleting any account change emails that came in so I wouldn't receive notices of changes.
I am highly suspicious of this new update to my head unit. The timing is spot on, and I haven't used my Google account anywhere other than my phone and this Joying unit.
I am very concerned now about the security of this device. I also don't understand the claim by Joying that "Google updated their servers" and that's why their firmware wasn't working with Google accounts. Smells very fishy to me, and I hope somebody that knows more about device security can help figure this out. I still have copies of the update that they sent me, but I will not be using this brand new head unit anymore with my Google Account.
I posted this thread because I have seen other comments about Google accounts being hacked and thought it would be best to consolidate them in one thread.
Click to expand...
Click to collapse
If you're not using MFA/2FA on your account(s) expect it be a matter of time until your account(s) be compromised again.
The joying update is what I would call purely coincidence and post hoc (Post hoc ergo propter hoc.)

Exactly this, without hard evidence that the Joying/Teyes/etc update is the cause of your Google account getting hacked, this is all pure coincidence. So far I'm aware of only 2 reports of accounts getting hacked, @explorer_200 and @6KayZee9. I've been lurking "the other" forum and i haven't seen any reports there either. Get some evidence to back up your claims and then start pointing fingers and have fyt (the software comes from them) be held accountable.

gamer765 said:
Exactly this, without hard evidence that the Joying/Teyes/etc update is the cause of your Google account getting hacked, this is all pure coincidence. So far I'm aware of only 2 reports of accounts getting hacked, @explorer_200 and @6KayZee9. I've been lurking "the other" forum and i haven't seen any reports there either. Get some evidence to back up your claims and then start pointing fingers and have fyt (the software comes from them) be held accountable.
Click to expand...
Click to collapse
It's not so much as proving anything as it is plugging the most probably source(s) of the leak to prevent it from ever happening again for the user.
If that means never using the software even the hardware, it's a small price to pay.
An OS reload may also be good idea at this point on all potentially infected devices and another password reset. Go nuts... this could get real messy if it's in the data drive and gets into the backups.
The perp may only target high value targets and leave the smaller fish be giving the illusion the site, software or whatever is safe.

blackhawk said:
Once bitten, twice shy... learn or get burned.
If you had a secure password that you managed well until 2 days ago that should narrow down your list of suspects substantially.
Time to take out the trash...
Results are all that matter; take out anything that might have been involved. The napalm method.
Overkill yes, but it's effective.
Breaching your Google account is completely unacceptable and I go nuts on anything/one that was potentially involved.
Click to expand...
Click to collapse
Have you considered aliens? Or ghosts? They both fit in with your assumptions thus far.
I guess you failed statistics 101. Your conclusion is flawed. You have failed to take into account the number of hackers in the world that were active 2 days ago and you have failed to take into account all the other apps you have attached to your account / sideloaded onto other devices that have access to that account.
Do that and then you are starting to get somewhere.
By all means change your password. But don't attempt to pass off your unsubstantiated claim as fact or anywhere in the realms of probability without some data to back it up.

ludditefornow said:
I guess you failed statistics 101. Your conclusion is flawed.
By all means change your password. But don't attempt to pass off your unsubstantiated claim as fact or anywhere in the realms of probability without some data to back it up.
Click to expand...
Click to collapse
If every 1 in 1k accounts gets hacked by an unscrupulous site or device and you're that one, you're still statistically 100% boned
The OP should suspect the use of their Google password; it's probably the most recent sites it was used on or the device.
I'd purged both, no remorse...

blackhawk said:
If every 1 in 1k accounts gets hacked by an unscrupulous site or device and you're that one, you're still statistically 100% boned
Click to expand...
Click to collapse
What does that have to do with the subject at hand? The ramification from being hacked has nothing to do with how one was hacked based on the OP.
And besides, the OP wasn't 100% boned as you put it. It was less than an hour before they realised and steps were taken to counter the hack. They had a couple of hundred dollars put on a card that will be reversed no doubt.
So that is another statistic failure. Friendly advice. Stop posting about stats in anyway until you get the fundamentals of them right

ludditefornow said:
What does that have to do with the subject at hand? The ramification from being hacked has nothing to do with how one was hacked based on the OP.
And besides, the OP wasn't 100% boned as you put it. It was less than an hour before they realised and steps were taken to counter the hack. They had a couple of hundred dollars put on a card that will be reversed no doubt.
So that is another statistic failure. Friendly advice. Stop posting about stats in anyway until you get the fundamentals of them right
Click to expand...
Click to collapse
You're the one that wanted a go at me.
Is that all you got?
All my data is redundantly* backed up without Google but some use it to back up everything.
Some have a lot to lose in just a couple minutes with a hacked Google account.
Don't trivialize it... on my account

Boy you guys are grumpy, neither of us are saying anything is definitively joyings fault, however its a much bigger coincidence when you consider that neither of us ever had a problem til now and ive had gmail since soon after it came online. Here is an alternate hypothesis I have carwebguru on my head unit as well. Maybe both explorer_200 and I have it on our head units and that code is the true culprit. Other than that all my apps ive had for a long time. Im not really sure that I believe this is all that sophisticated unless its on a huge scale since they only got a few hundred from visa and or google. And for that they have some pretty powerful entities who may now be taking an interest. We are just sending all this up the flag pole to see how many salute...

blackhawk said:
You're the one that wanted a go at me.
Is that all you got?
All my data is redundantly* backed up without Google but some use it to back up everything.
Some have a lot to lose in just a couple minutes with a hacked Google account.
Don't trivialize it... on my account
Click to expand...
Click to collapse
I'm not trivalizing being hacked at all. I think you need to reread my posts. Because your response tells me you haven't understood them.

Wow. I didn't expect this to be a controversial thread. I've seen a few posts in here from people who have gone through the code on these units and found Chinese URL's that don't appear to have any uses. I am not definitively saying anything here, but Reddit is full of people wary of running Android on these devices because they have such huge potential to be compromised.
I am VERY careful with my Google account information online. I am highly aware of phishing schemes, and haven't used an external device other than my Pixel2, Pixel4, Laptop, Nvidia Shield, to log into Google in over 5 years.
The attack was similar in both of our cases, and happened within a few days of us logging into Google with a new Joying head unit (that had verified Google Login issues from a 2021 firmware update)
Anyways... I've changed my Google password 3 times since this happened, and am monitoring my Google audit log multiple times per day. So far so good, but unfortunately I won't be using this head unit with my Google account going forward

After activating my Google account on the new Navifly headunit, I received a notification from Google that I need to change all passwords (about 350 pieces). In addition, all contacts from the phonebook (on the mobile phone) and automatic backup have disappeared. I deactivated the account on headunit, but it didn't help. I plan to contact Google to see if they can help me.

nenadhebiv said:
After activating my Google account on the new Navifly headunit, I received a notification from Google that I need to change all passwords (about 350 pieces). In addition, all contacts from the phonebook (on the mobile phone) and automatic backup have disappeared. I deactivated the account on headunit, but it didn't help. I plan to contact Google to see if they can help me.
Click to expand...
Click to collapse
This doesn't make any sense.

I'll say it again; enable 2fa/mfa on your Google account.
If not using multifactor authentication or doing questionable things like accepting apps access to your Google account, expect to be compromised.

nenadhebiv said:
After activating my Google account on the new Navifly headunit, I received a notification from Google that I need to change all passwords (about 350 pieces). In addition, all contacts from the phonebook (on the mobile phone) and automatic backup have disappeared. I deactivated the account on headunit, but it didn't help. I plan to contact Google to see if they can help me.
Click to expand...
Click to collapse
Actually I lost all my Google contacts as well with the Joying unit, but I found out it had to do with the bluetooth syncing from my phone to the head unit. You've gotta disable it.
Search for "head unit deleted all my Google Contacts" and you'll see lots of threads.