Readers like you keep news free for everyone.

More than 5,000 readers have already pitched in to keep free access to The Journal.

For the price of one cup of coffee each week you can help keep paywalls away.

Support us today
Not now
Tuesday 5 December 2023 Dublin: 6°C Google's Chinese website,, has redirected all users attempting to make a search to the site for Hong Kong.

China may have been spying on Gmail accounts

Gmail users begin to see red banners on their pages warning them that IP addresses in China were attempting to log in.

GOOGLE HAS BEGUN placing striking red banners on the Gmail accounts of users who it believes were the subject of attempted logins by China.

Users affected by the attempted hi-jacking of the accounts have been met with a red banner at the top of the Gmail inbox, reading the IP address of the user attempting to log into the account:

Warning: We believe your account was recently accessed from: China (***.***.***.***).

The banner also advises the affected users to change their Gmail passwords.

Such prompts are not necessarily new: Google has offered users a prompt at the bottom of a user’s Gmail profile advising them of simultaneous logins elsewhere for over a year, while Facebook also warns users when people attempt to log into an account from another country, and asks them to suggest whether such a login may have been maliciously motivated.

However, Gmail’s move is the first time that Google users have been so significantly prompted about attempted logins into their accounts.

Furthermore, it seems that only Chinese login attempts appear to trigger the striking red bar – indicating that Google may believe the attempted logins are not from ordinary Chinese internet users, but rather from state agencies.

Researchers believe that a second wave of the attacks, known as the ‘Aurora attacks’, has kicked off within the last few weeks.