Urgent Help Needed - Domain Hijacked and Hacker Has Control Over Workspace

[Muralikumar]

I am writing to seek urgent assistance regarding a severe security breach that has occurred on our domain. Our domain was recently hijacked by a hacker claiming to be from the Netherlands, and now he has complete control over our drive, Slack, website, emails, and everything related to our domain.

We are able to send emails from the gsuite account but not receiving any emails anymore from anyone. The hacker is using my own work email to send threatening emails to personal gmail account. We are extremely worried about the situation and do not know what to do next.

The hacker has already taken over our website, deleted our Slack, and accessed files from the drive. We urgently need your help to secure our domain and prevent any further damage.

Please suggest what steps we should take in this case, and how we can regain control of our domain and all the related services.

Thank you for your prompt attention to this matter. Any suggestions or assistance you can provide would be highly appreciated.

[cryptochrome]

Since you have already been breached (and I am assuming you lost access to your Google Admin console as well), you shouldn't wait or find help on forums. Get a security incident response team on it right away. I can recommend these guys (available 24*7):

https://surefirecyber.com/

Good luck!

[login]

@Muralikumar In such cases, the most important factor is the login factor with SMS verification. If you can, try to get your accounts back via SMS. Otherwise, a long process begins to get your account back by contacting the account managers of the companies you are a member of with your manual and scanned ID card information. My advice is to always keep a backup of your work accounts and databases on localhost if you are doing big business.