A concerning online threat is targeting Gmail users, as hackers are devising new schemes to gain unauthorized access to email and other accounts. The latest scam, identified by Malwarebytes, involves a deceptive message purportedly from Google Support, claiming an account breach and prompting a password reset. Some victims even receive follow-up phone calls to add credibility to the fraudulent emails.
The hackers’ goal is to acquire the security code sent by Google during password resets, enabling them to infiltrate accounts and pilfer personal information. Malwarebytes warns that scammers pose as Google support, tricking users into providing login credentials and verification codes under the guise of resetting the account, allowing the perpetrators to seize control.
Though the extent of this issue is uncertain, reports indicate recent attempts on Google users. One account holder recounted a scammer’s attempt to seize account control during a phone conversation. The scammer went as far as instructing the victim to verify the call’s legitimacy by dialing back, a ploy that proved to be a ruse.
If approached by Google requesting an account reset, exercise caution as it is likely a scam. Google has issued a statement advising users not to disclose any information to such entities falsely claiming affiliation with Google. The company warns against paying for password recovery services or heeding calls alleging account compromise, emphasizing that Google does not provide phone support for Gmail-related issues.