Recently, Sam Mitrovic, a solutions consultant at Microsoft, warned Gmail users about a scam involving impersonating Google employees, sending messages and making calls to inform victims that their accounts have been compromised and requesting them to perform actions to recover their accounts.
Initially, the perpetrators will send the victim an email requesting approval for an account recovery attempt in a different region or country. Just minutes later, the victim will receive a call from someone posing as a Google employee.
The perpetrators will ask the victim if they are traveling or on business abroad, then inform them that their Gmail account is showing signs of being compromised, and that if they do not quickly take security measures, all their data is at risk of being stolen.
Scammers will impersonate Google employees, asking users to click on a link to provide personal information.
After convincing the victim, the perpetrators will send another email, informing them that their case is being processed by the staff and requesting them to access an attached link to provide personal information to verify account ownership.
After providing the information, another email message appears requesting approval for an account recovery attempt. This time, the message indicates that the attempt is being made at a location matching the victim's place of residence. Once the victim approves, the account will be completely taken over by the perpetrators.
In response to the aforementioned scam, the Information Security Department ( Ministry of Information and Communications ) advises people to be highly vigilant when receiving messages with similar content. Carefully check URLs and email addresses through official portals.
Limit sharing sensitive information and personal data on social media. Absolutely do not access strange links, provide information, or follow instructions from individuals whose identities have not been verified.
When receiving suspicious messages or calls, people should quickly block and report the messages, and also provide the email address and phone number of the unknown caller to the authorities to promptly prevent fraudulent activities.
Source
Comment (0)