Users urged to promptly update their Gmail passwords due to potential security risks
In a series of recent attacks, hackers have been targeting Gmail users, aiming to collect data from millions of accounts worldwide. These attacks are part of a broader campaign against Google's services, which is currently affecting approximately 2.5 billion users.
The attacks began with a telephone scam, where users received a call from someone impersonating a Google support employee. Claiming that unknown third parties had attempted to hack into their Gmail account, the imposter advised the user to reset their password to secure their account from the alleged "attack."
In step 3 of the attack, when the user resets their password, they receive a verification email containing a code. The imposter then asks the user to read this code aloud, giving the criminals access to the Gmail account while keeping the victim on the phone.
For the Gmail attack, scammers employ various tactics to take over accounts and collect data, including Voice Phishing (Vishing), a phishing attempt via telephone. This method has seen an 84 percent increase in password theft attempts via Gmail last year, with experts expecting the problem to worsen by 2025.
Google's Threat Intelligence Group has confirmed that the hackers behind these attacks are allegedly from the ShinyHunters extortion group. This group was previously linked to a data breach of the Google-Salesforce database. In a blog post, Google's Threat Intelligence Group announced that the hackers had stolen customer data in this attack.
The current attacks on Gmail users are a result of the hacker attack on Google's services that was announced in early August. Google's cybersecurity measures are under scrutiny, with only 36 percent of Gmail users regularly changing their passwords, according to new data from Google.
Google emphasizes that its employees do not call users to reset passwords or for account problems. To protect their accounts, Google recommends using additional security features, such as two-factor authentication and account recovery options. Google offers these features to help users secure their accounts from hacker attacks.
Google automatically sends out security warnings when it detects potential threats to user accounts. These warnings are meant to alert users to potential unauthorized access to their accounts. Users are encouraged to take these warnings seriously and take immediate action, such as changing their passwords and enabling additional security features.
In response to the increasing number of attacks, Google urges all Gmail users to prioritize their account security. The majority of users should change their passwords immediately, as confirmed by Google to "Forbes." By taking proactive steps to secure their accounts, users can help protect themselves from these malicious attacks and the data breaches they can cause.
