* Change the password for the suspected compromised account:
* Sign in to the Google Admin console.
* From the Admin console Home page, go to "Users."
* Find and select the account "[email protected]."
* Click on "Security" and then "Password."
* Follow the instructions to change the password.
* Configure a Sender Policy Framework (SPF) record for your domain:
* Log in to your domain host (e.g., GoDaddy, Bluehost).
* Locate the page for updating your domain's DNS records.
* Add a new TXT record for your domain with the SPF rule, typically something like:
v=spf1 include:_spf.google.com ~all
* Save the changes to update the DNS records.
Changing the password helps secure the compromised account, while configuring SPF helps prevent email spoofing, ensuring that fake emails are less likely to be delivered as though they come from your legitimate email address.
References:
* Google Workspace Admin Help - Change or reset a user's password
* Google Workspace Admin Help - Set up SPF records