Hackers are deploying a new online scam targeting Gmail users, posing a significant threat to their accounts. Malwarebytes has identified this latest scheme, where cybercriminals send fake emails purportedly from Google Support claiming unauthorized access attempts to the recipients’ accounts, prompting them to reset their passwords. In some cases, victims even receive follow-up phone calls to further authenticate the scam.
The objective of this ploy is to extract the security code sent by Google during password resets. By acquiring this code successfully, hackers can infiltrate the accounts and steal sensitive personal information. Malwarebytes elucidated that victims are deceived into entering their login credentials in response to a separate account reset email, with scammers manipulating the situation to hijack the accounts during the verification process.
Although the extent of this issue remains uncertain, reports from affected Google users have surfaced in recent weeks. One individual recounted on Reddit how a scammer attempted to gain control of their account while engaging in a phone conversation. To enhance the illusion of legitimacy, the fraudster instructed the victim to verify the caller’s number, which ultimately proved to be a deceptive tactic.
Google has issued a cautionary statement advising users to exercise vigilance and refrain from divulging any personal data in response to suspicious account reset requests. The tech giant emphasized that any such contacts claiming to offer password reset assistance are fraudulent and unauthorized, as Google does not charge for account recovery services or provide phone support for Gmail-related issues. It is imperative for users to remain cautious and vigilant against such fraudulent attempts to safeguard their online security.