TimonK

A moment ago I received a mail from Evernote that there was a suspicious login. Ok, so far, good message. But then I tried to login myself, it said "suspicious login, please confirm by mail". My question is, why didn't the first (fraudulent) login trigger this response? Now someone has had access to my account, from 3 different IP's. (Shanghai, Germany and Taiwan). I've already changed my password.