A new online threat is causing concern among Gmail users as hackers are devising ways to gain unauthorized access to email and other accounts. Malwarebytes has identified a recent scam specifically targeting Gmail users, posing a significant risk to unsuspecting individuals.
The scam typically starts with a deceptive message claiming to be from Google Support, alerting the user of an attempted account breach and prompting a password reset. In some cases, the email is followed by a phone call to further enhance its credibility.
Hackers employ this tactic to extract the security code sent by Google during a password reset process. If successful, hackers can infiltrate the account and pilfer personal information.
According to Malwarebytes, victims receive an email or call purportedly from Google support, advising them to reset their password for security reasons. Subsequently, a separate email is sent to the victim containing login credentials and a verification code. The victim is instructed to relay the code to confirm legitimacy, but in reality, hackers exploit this opportunity to take control of the account.
Although the extent of this issue remains unclear, several Google users have reported being targeted recently. One Reddit user shared their experience of a scammer attempting to commandeer their account during a phone conversation.
To add a sense of authenticity, scammers may request victims to verify their calling number by dialing it themselves. However, as the Reddit user pointed out, calling back the number often leads to a dead end with no human interaction.
If you receive any communication from Google urging an account reset, exercise caution as it is likely a fraudulent scheme. Google has issued a warning against sharing any personal data in response to such solicitations.
Google emphasized that these fraudulent contacts are not affiliated with the company and may falsely claim to offer password reset services for a fee. Google does not charge users for account recovery or password changes. Additionally, Google does not provide phone support for Gmail-related issues, and any such calls are not endorsed by Google.