Hackers have devised a new online threat targeting Gmail users, posing as Google Support to trick victims into providing their login credentials. The scam involves sending fake emails and making follow-up phone calls to deceive users into resetting their passwords, allowing hackers to steal personal information. Malwarebytes highlighted this alarming tactic, warning users to be vigilant.
The malicious scheme involves manipulating victims into disclosing security codes sent by Google during password resets, granting hackers unauthorized access to accounts. Despite the exact scale of the issue being unclear, reports of such attacks on Google users have emerged in recent weeks. An affected user recounted on Reddit how a scammer attempted to take over their account by pretending to assist with account recovery over the phone.
To enhance the deception, scammers even instructed victims to verify the caller’s number, creating a facade of legitimacy. Google has issued a statement cautioning users against falling for such fraudulent attempts, emphasizing that they do not solicit personal information or charge for account recovery services. The tech giant reiterated that it does not offer phone support for Gmail-related issues, urging users to remain cautious and report any suspicious communications claiming to be from Google.
It is essential for users to exercise caution and skepticism when receiving unexpected communications requesting account resets or personal information, as scammers continue to evolve their tactics to deceive unsuspecting individuals.