2.5 billion Gmail users have been warned over a ‘devastating scam’ that is said to allow hackers to steal banking and sensitive data.
While we can all everything we can to ensure our devices are as secure as they possibly can be, some things are sometimes just out of our hands.
Cybercriminals are seemingly using all the right tricks to take advantage of innocent web users and recently, they have been targeting Gmail customers, which sees them use AI to create realistic phone calls and send out seemingly legitimate emails.
Following these hyper realistic phone calls, an email is then sent which prompts users to a website that seemingly looks identical to that of the Google website. But the link is very much scam.
And if that link is pressed, then the hackers have the ability to commit identity, financial and information theft.
Spencer Starkey, a vice-president at SonicWall, has stated companies such as Google need to be on their toes to ensure their users are safe.
He said: “Cybercriminals are constantly developing new tactics, techniques, and procedures to exploit vulnerabilities and bypass security controls, and companies must be able to quickly adapt and respond to these threats.
“This requires a proactive and flexible approach to cybersecurity, which includes regular security assessments, threat intelligence, vulnerability management, and incident response planning.”
Victim Sam Mitrovic recalled his ordeal, saying to the Metro: “The scams are getting increasingly sophisticated, more convincing and are deployed at ever larger scale.
“People are busy and this scam sounded and looked legitimate enough that I would give them an A for their effort. Many people are likely to fall for it.”
Back in May 2024, the FBI issued a warning about the increasing threat of cybercriminals using AI in their scams to make it difficult for users to spot.
Robert Tripp, from the FBI, said at the time: “Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.
“These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”
The FBI also warned about staying vigilant to ensure you don’t become a victim of these scams.
“Be aware of urgent messages asking for money or credentials. Businesses should explore various technical solutions to reduce the number of phishing and social engineering emails and text messages that make their way to their employees,” the website states.
“Additionally, businesses should combine this technology with regular employee education and employees about the dangers of phishing and social engineering attacks and the importance of verifying the authenticity of digital communications, especially those requesting sensitive information or financial transactions.”
Adding a multi-factor authentication is also a good idea, according to the agency to ensure you’re as best protected as possible.
Zach Lata, who is the founder of Hack Club and nearly became a victim to the hack, revealed how cybercriminals used a pretty simple method in an attempt to steal sensitive data.