Question New form of hacking: Need help

So I have a friend who replied to a craigslist ad and the person on the other end said "I'll send you the link once I get the access code" She received an access code on her phone and sent it to him. Then he took over her gmail account. Some app got installed after that.

I have never seen this type of attack. We are trying to log her out of all sessions in google and reset her password, but the hacker keeps messing with it. Yes we powered down the phone and reset everything from a windows desktop. Somehow they are preventing her from changing her password.

If I were to guess, the hacker used a "Forgot my password" verify another way. And my friend not knowing any better gave them the reset code that came in text. But I never seen it where they couldn't regain their account and reset the password.
 
Last edited:
So I have a friend who replied to a craigslist ad and the person on the other end said "I'll send you the link once I get the access code" She received an access code on her phone and sent it to him. Then he took over her gmail account. Some app got installed after that.

I have never seen this type of attack. We are trying to log her out of all sessions in google and reset her password, but the hacker keeps messing with it. Yes we powered down the phone and reset everything from a windows desktop. Somehow they are preventing her from changing her password.
Password resets need to be done from a different device.