A concerning online threat has emerged, posing a risk to Gmail users. Hackers are actively devising new methods to target individuals, and falling for their latest ploy could result in unauthorized access to email and various accounts. The team at Malwarebytes has identified this new danger specifically aimed at Gmail users, highlighting how some individuals are being ensnared.
The scam initiates with a message claiming to be from Google’s Support service, alerting the recipient that an attempt to breach their account has been detected, necessitating a password reset. To enhance the credibility of the ruse, some victims even receive follow-up phone calls after the initial email.
In an attempt to acquire the security code sent by Google during a password reset, hackers utilize this tactic. If successful, they can breach the account and pilfer significant personal information. Malwarebytes elucidated, “Victims receive an email or call purportedly from Google support, urging them to safeguard their account by resetting the password.” Subsequently, a separate email is sent to the victim, prompting them to input their login credentials. This email includes a code that the victim must relay to affirm their legitimacy. While purportedly assisting in resetting the system, the scammers exploit these crucial moments to seize control of the victim’s account.
Although the extent of this issue remains uncertain, several Google users have reported being targeted recently. A Google account holder shared on Reddit, “He was actively trying to recover my account and gain control of it while on the phone with me.” To add authenticity to the deceit, the scammer even instructed the victim to verify the caller’s number, disconnect the call, and redial the number.
“If you receive any communication from Google requesting an account reset, exercise caution as it is likely a scam,” warned Google. The company emphasized the importance of not divulging any information to such deceptive contacts. Google reiterated, “These entities and their websites are not affiliated with Google and may falsely claim to offer password reset assistance and other Gmail-related support services.” Furthermore, Google clarified that they do not charge users for account recovery or password changes and do not provide phone-based support for Gmail.
REWRITE_BLOCKED: The content contains third-party specific information that cannot be rewritten without additional details.