A sophisticated new scam by hackers is targeting billions of Google Gmail users, and anyone could become a victim.
 |
| Billions of Gmail users are being targeted by hackers. |
Sam Mitrovic, a security solutions consultant for Microsoft, has just issued a warning about a highly sophisticated scam targeting Gmail users, aided by AI.
Sam Mitrovic himself was also targeted by hackers using this sophisticated scam. Specifically, he received an email requesting him to recover his Gmail account, along with a link to a fake website mimicking the Gmail interface to steal his login information. This is a fairly common scam, and of course, Sam Mitrovic was not fooled by it.
After declining the request, Sam Mitrovic unexpectedly received a notification that he had missed a call from Google in Sydney just 40 minutes later. However, he ignored the information.
A week later, at the same time of day, Mitrovic received the same notification and again declined. But this time, he listened to the subsequent call and spoke to a man with an American accent who identified himself as a Google support representative, even though the call originated from Australia.
The man on the other end of the line said he had detected suspicious activity on Sam Mitrovic's Gmail account and suspected someone was trying to hack into his inbox to steal data.
While the call was in progress, Mitrovic quickly searched for information about the incoming phone number on Google and found that it was a valid number, with information appearing on Google's website.
However, Sam Mitrovic was still not entirely convinced by the call, so he requested that the caller send an email to confirm the information. When the email arrived, he examined it carefully and found that its content was very authentic, similar to other emails sent from Google.
 |
| The content of the fake email sent to Sam Mitrovic by malicious actors. |
However, upon closer examination of the email address, Sam Mitrovic discovered that the email was sent from a fake Google domain, cleverly disguised. This clue helped him realize it was just a hacker's ploy to infiltrate his Gmail account.
Scammers can look up Google's phone number information online, then use spoofing software to make calls, tricking victims into believing it's a call from Google and easily complying with their requests. Additionally, they can send fake emails using Salesforce CRM software, which allows them to change the sender's address to any address they want.
If Sam Mitrovic had accepted the account recovery notification, he could have lost control of his account to scammers. In many situations, an ordinary person can easily be tricked and give control to malicious actors.
Mitrovic believes that targeting Gmail accounts is a global hacking campaign, and that he is one of them. Therefore, he felt compelled to speak out to warn others.
 |
| Users should be wary of attachments sent to them via Gmail. |
To protect yourself, users should not agree to any unverified Gmail account recovery requests. When opening emails, carefully check the sender's address to ensure that the emails are from acquaintances or large, trustworthy companies.
If you receive emails from strangers with links or attachments, it's best to ignore and delete them immediately. Absolutely do not access the website or download the attached files.
Source: https://baoquocte.vn/canh-bao-chieu-tro-lua-dao-tinh-vi-nham-vao-nguoi-dung-gmail-290115.html
Comment (0)