The most frightening part of the indexofgmailpasswordtxt phenomenon is that your Gmail address could be inside one of those files right now, without your knowledge. Here’s what to do:
If you own a website or custom domain, set up a Google Alert for intitle:index.of + your domain. You’ll be notified if Google indexes a directory listing on your site. indexofgmailpasswordtxt exclusive
A compromised Gmail account is a goldmine. Attackers search for: remove autoindex on
If you run Apache, remove Options +Indexes from your .htaccess or virtual host configuration. For Nginx, remove autoindex on;. indexofgmailpasswordtxt exclusive