There’s a worrying new alert for all Gmail users, with Google urging everyone to stay ‘vigilant’. The latest attack on one of the world’s most popular email platforms appears to be targeting users via fake phone calls. Things begin with the cyber crooks saying they are from the US tech giant. Next, they attempt to get unsuspecting consumers to hand over personal details by claiming they need to verify a recovery account details change for a Google account.
Of course, there is no recovery needed. What they are actually attempting to do is get hold of the secure two-factor authentication code in a bid to hack the account and lock the real user out.
It’s unclear how widespread the problem is, but one Gmail user recently detailed how hackers tried to attack them via the scam. Writing on Reddit, EvilKittensCo said a fake Google agent had called and informed them that they needed to verify the recovery account.
A code was then requested in order to make sure the account stayed active.
What makes things scarier is that the number used to make the call appears to be from Google. When asked for an email address to confirm they really were calling from the tech giant, an official-looking address was also supplied.
EvilKittensCo became suspicious but says the hackers then started using pressure and fear tactics in a bid to access the account.
Other users have now joined the thread, saying they have also been targeted by this threat.
It’s clearly a worrying trend with Google now speaking out about the scam and telling its Gmail users must stay alert.
In a statement sent to Forbes, Google said, “This is a known scam targeting a limited number of users – we have no evidence it’s a wide-scale tactic. We’ve hardened our defenses to protect users from this type of abuse and suspended accounts that have misused Google services in these scams. But we encourage all users to remain vigilant – please reiterate to your readers that Google will not call you to reset your password or troubleshoot account issues.”
Just remember that Google will NEVER call you out of the blue and start asking for verification codes to be sent.
If you receive a phone call from anyone claiming to be from the firm, you should hang up immediately.
It’s also worth remembering that authentication codes are only ever to be used with trusted Google products during user-initiated security operations.
You have been warned, so stay alert.
This latest attack comes after Gmail users were also put on alert over an ‘extremely sophisticated’ email scam that tries to persuade people into handing over their Google account credentials.
Find out how to stay safe from that threat here