Gmail Users Alerted About Potential Account Takeover Scam
Details of the Scam
A technology startup CEO and a security researcher have raised the alarm about a potential scam targeting Gmail users. The scam, which is sophisticated and AI-based, could result in users losing control of their accounts. Garry Tan, the CEO of tech-focused venture capital firm Ycombinator, reported that the scam involves an AI-generated voice claiming to be from Google Support. The scammers attempt to convince the user to allow password recovery, under the guise of verifying the user's identity and dismissing a false death certificate.
Similar Scam Attempts
IT consultant Sam Mitrovic documented a similar scam attempt in a blog post. He noted that the scams are becoming increasingly sophisticated and convincing. Mitrovic reported receiving a notification to approve an attempt to recover a Gmail account, which he declined. He later received a phone call from a number identified as "Google Sydney," which he also rejected. A week later, he received another recovery notification, followed by a call from an American number. The caller, who claimed to be from Google, reported suspicious activity on Mitrovic's account.
Recognizing the Scam
Mitrovic noted several red flags that helped him identify the scam. He didn't initiate the account recovery messages he received, and Google does not typically call users unless they have a Google Business Profile. The email he received was not from a Google domain, and the email header revealed that the email was spoofed. Additionally, a reverse number search showed that others had received the same scam call.
Google's Response
Attempts to reach Google for comment on Mitrovic's and Tan's warnings have not yet elicited a response.
Bottom Line
While technology continues to advance, so too do the methods employed by scammers. This potential scam targeting Gmail users is a reminder of the importance of vigilance and skepticism when dealing with unexpected communications. It's crucial to be aware of the telltale signs of a scam and to always double-check any suspicious activity. What are your thoughts on this matter? Would you have recognized the red flags? Share this article with your friends to raise awareness about this potential scam. Don't forget to sign up for the Daily Briefing, which is delivered every day at 6pm.
