Google-Sicherheitswarnung entpuppt sich als Trojaner

[müllersq]

Ich hab dieses Mail bekommen von accounts-noreply@google.com
Die IP steht im Original-Mail drin.

Someone recently tried to use an application to sign in to your Google Account, walter.gallauner@gmail.com. We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:
Saturday, September 1, 2012 8:12:09 PM GMT
IP Address: xxx.xx.xxx.xx (wayport.net)
Location: Winter Springs, FL, USA

If you do not recognize this sign-in attempt, someone else might be trying to access your account. You should sign in to your account and reset your password immediately. Find out how at http://support.google.com/accounts?p=reset_pw
If this was you, and you want to give this application access to your account, complete the troubleshooting steps listed at http://support.google.com/mail?p=client_login
Sincerely,
The Google Accounts Team
© 2012 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
You have received this mandatory email service announcement to update you about important changes to your Google product or account.

Da war aber kein Anhang dabei.

Zur Sicherheit bin ich nach Erhalt des Mails in meinen Google-Mail-Account reingegangen (nicht über den Link des Mails) und habe das Passwort geändert.

Zum behaupteten Zeitpunkt habe ich in einer McDonalds-Filiale in Arizona über das dortige WiFi mit Thunderbird meine E-Mails abgefragt.