In former breaches, EN communicated that there were searches done for Bitcoin wallets and related data. So even if one thinks it should be easy to catch intruders, it probably is not. Because people with legitimate accounts will buy new computers, and sync their EN data there.

Now, why is it hard to detect ? Because people with legitimate accounts as well travel (less so these days) and use VPNs to cloak their geolocation (if only to watch the latest Netflix stuff not yet released for their country). Web is less critical than a device, and most critical are PC or Mac, that will create a complete local copy by syncing it.

So it depends on the type of access that is shown. The hacker (probably only one) instead used a VPN service to cloak his real location. Most likely the access did not come physically from all the places mentioned. If the access was by web browser, as in the example shown first in this thread, they can search on the EN server, and fetch the content of notes found, but it will not download all the data. This can be browsed offline, as we all know. If it is a desktop, this creates a local copy of the account on that desktop. If a hacker got access to your account, they can simply download the content by syncing it to a device. Why the hell would you make it possible for people from a completely different country to login via new device, instead of blocking them and require a confirmation thru email? This is insane.

This on top of this hack AND the fact that there's no Evernote hotline or easy way to reach them REALLY makes me consider dumping the service after almost a decade.)Ĭan I see what this hacker has done in my account? Have they downloaded all notes, browsed thru them etc? Is there any way to check this?Īs we speak I'm changing all my passwords for literally everything - but this would be good to know.Īnd this is for a mod / evernote employee: so I can't login my desktop / phone app now. (Although, the authentication sms code does not work. I pretty much dumped my life in evernote so am less than thrilled. Clearly I changed my password, put on 2FA etc. Alright, so I just read an evernote email about a login from Ukraine.

Evernote hacked apk 2019