I don't agree with you. I used a strong generated password. All my passwords are generated. You're correct, I don't have 2FA enabled, now I have. But with a password that is strong and complicated. It is strange that my Evernote account was accessed. And Evernote should have warned me way sooner! And no i don't have spyware / malware on my machines.
It seems an app pretending to be Skitch for Android.
Skitch for Android
__EVERNOTE-CLIENT-162
22-11-2023
187.127.46.139
(Belo Horizonte, Minas Gerais, Brazil)
Skitch for Android
__EVERNOTE-CLIENT-315
22-11-2023
181.191.99.234
(Entre Rios, Bahia, Brazil)
Skitch for Android
__EVERNOTE-CLIENT-162
22-11-2023
178.20.17.136
(Muscat, Muscat, Oman)
Skitch for Android
__EVERNOTE-CLIENT-250
22-11-2023
170.245.151.71
(Piraquara, Parana, Brazil)
Skitch for Android
__EVERNOTE-CLIENT-315
22-11-2023
170.80.81.48
(Martinopole, Ceara, Brazil)
Skitch for Android
__EVERNOTE-CLIENT-162
22-11-2023
109.72.77.44
(Moscow, Moscow, Russia)
Skitch for Android
__EVERNOTE-CLIENT-162
22-11-2023
102.218.157.50
(Gauteng, Gauteng, South Africa)
Skitch for Android
__EVERNOTE-CLIENT-315
22-11-2023
84.121.27.75
(Alfafar, Valencia, Spain)
Skitch for Android
__EVERNOTE-CLIENT-162
22-11-2023
45.70.236.235
(Guayaquil, Provincia del Guayas, Ecuador)
Evernote for Windows Touch
A Windows 8 Device
21-11-2023
185.61.218.217
(Brasília, Federal District, Brazil)
Evernote for Windows Touch
A Windows 8 Device
21-11-2023
45.80.105.248
(Israel)