Google Post? to caution! Thus they steal your Gmail account

A modern hunting campaign you put At risk of Gmail usersWhen using advanced technologies To send fraudulent emails It seems that the legitimate notifications From the official direction no-reply@accounts.google.com.

How does this fraud work?

The attackers have benefited from the weakness of the mail verification systems Send messages that mimic come from Google.

The message is usually The present as a judicial breach or a warning to the content Concerning the user account, with a link to a False page imitation of the official Google support.

You may be interested in reading: How to empty the fast and easy Gmail without paying more for storage

When entering that page and trying to log in, the user accreditation data is stolen and sent to Internet criminals, who can then take the total account control, including messages, related services, documents and stored payment methods.

Why is this situation different?

The most dangerous thing about this campaign is that criminals managed to enjoy the DOMAINKEYS MAIL authentication, a system that verifies whether the mail really comes from the field you say.

In addition, they used Oau to create apparently valid safety notifications. Although the malicious links were not active (not hypervocated), the DKIM signature gives a false sense of legitimacy.

How to protect yourself?

Here we leave you a series of basic measures to protect your Gmail account and avoid falling into this type of fraud:

1. Do not click on suspicious links

Avoid entering the pages through the links you received via email, especially if:

• They use worrying language or legal emergencies.
• They ask you to log in immediately.
• They promise to improve benefits or security.

2. Always check the URL

The only official page that enters your Google account is:

https://accounts.google.com

If you see slight differences in the direction of the web, such as Total rare words or fields (For example: Accounts-Google-SUPPORT.IXYZ), avoid entering your data.

3. Activating two verification steps

Increase your account’s safety by activating two authenticity of your Google’s safety composition.

4. Don’t only trust the sender seeing

The fact that an email message says it comes from “no-reply@accounts.google.com“It does not guarantee that it is a legitimate project. It always verifies the content of the message, and if you have doubts, enter your account directly from the browser (and not from the link in the mail).

5. Update your program constantly

Both the browser and the operating system should be updated. Many safety gaps occur on old devices.

What do you do if you already given your data?

If you think you were a victim of this fraud:

• Change your password immediately From another reliable device.
• Check your last activity in https://myaccount.google.com/security
• Remove Suspicious access to connected applications.
• Google is learned through your auxiliary center.

Google is already bridging this safety gap. Meanwhile, the main recommendation is the severe precautions with any email requesting urgent procedures, even if it is from an official source.

BGPA