AI-Powered Phishing Scam Targets Gmail Users: How to Protect Yourself
A recent wave of phishing scams is targeting Gmail users, exploiting artificial intelligence (AI) to impersonate Google Support and deceive people into divulging their account credentials.
AI-Powered Phone Calls
Cybercriminals are utilizing AI to generate highly convincing phone calls that mimic Google Support. These calls often alert users to supposed suspicious activity on their Gmail accounts.
Fake Account Recovery Notifications
The scam begins with a fraudulent account recovery notification designed to resemble a legitimate Google message. If a user falls prey to this, they are redirected to a fake login page where they are prompted to enter their email address and password.
Convincing Details
To enhance the legitimacy of their calls, scammers even use genuine Google Support phone numbers. They may also claim that an attacker has been accessing the user's account for an extended period and has downloaded data.
How to Protect Yourself
- Exercise caution with account recovery notifications: Never click on links in suspicious emails or text messages, especially if they demand your account information.
- Don't trust phone calls from unknown numbers: If you receive a call claiming to be from Google Support, hang up and contact Google directly to verify the caller's identity. You can locate the official Google Support phone number on their website.
- Scrutinize email addresses and links: When you receive an email from Google, carefully verify the sender's address and ensure it ends with "@google.com." Also, be wary of links that redirect you to unfamiliar websites.
- Enable two-factor authentication: This adds an extra layer of security to your account, making it significantly more difficult for hackers to gain access.
How does the phishing scam work?
The phishing scam starts with a fake account recovery notification, which looks like a legitimate Google message. If the user falls for this, they are redirected to a fake login page where they are asked to enter their email address and password.
What kind of information are the scammers trying to obtain?
The scammers are trying to obtain the user's email address and password.
What makes the phishing scam convincing?
The scam is convincing because it uses AI to make realistic-sounding phone calls and the scammers use real Google Support phone numbers. They also claim that an attacker has been accessing the user's account for weeks and has downloaded data from it.
How do the scammers use AI in the phishing scam?
The cybercriminals use AI to make realistic-sounding phone calls, claiming to be from Google Support.
What is Google’s advice for protecting against this scam?
Google advises users to be cautious of account recovery notifications, don't trust phone calls from unknown numbers, check email addresses and links carefully, and enable two-factor authentication.
Staying Safe
It is crucial to remember that Google Support will never request your password or other sensitive information over the phone or through email. If you ever have doubts about a message or call you receive, contact Google directly to confirm its authenticity. Stay vigilant and protect your online accounts.