Gmail users placed on red alert and not following advice could be ...

Gmail users are being warned about a concerning scam employing a novel approach to pilfer personal information and hijack accounts. These advanced and 'devastating' attacks are now utilising AI technology to deceive email users, and it's easy to understand why some individuals have been duped.

Warnings about this emerging threat were first issued in May last year when the FBI in America raised an alarm following a noticeable increase in Artificial Intelligence-related scams. Some incidents were so severe that victims found themselves stripped of both money and identity by online fraudsters.

At that time, FBI Special Agent in Charge Robert Tripp commented: "Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike. These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data."

Since the initial warnings, the number of targeted individuals has grown. The experts at Malwarebytes have recently provided fresh advice on what signs to look for and how to protect oneself.

As per these cybersecurity specialists, the scam often begins with a phone call alleging that the recipient's Gmail account has been breached, followed by an email that convincingly seems to be sent from Google itself, reports the Mirror.

"The goal is to persuade the target to hand over their Gmail recovery code to the criminals, under the pretence that it's required to restore the account," explained Malwarebytes.

If the target falls for this trick, the criminals gain access not only to their Gmail account but also to a host of other services, potentially leading to identity theft.

One individual who was targeted has shared his experience in a detailed blog post. Sam Mitrovic, a Microsoft solutions consultant, received a notification asking him to approve a Gmail account recovery attempt.

This was followed by a phone call, which seemed authentic, informing him of suspicious activity on his account. Fortunately, Mitrovic sensed something was amiss and ended the call.

"The scams are becoming increasingly sophisticated, more convincing and are being executed on a larger scale," Mitrovic stated.

"People are busy and this scam appeared legitimate enough that I would give them an A for effort. Many people are likely to fall for it."

In addition to these account recovery scams, the FBI has issued a warning about unsolicited emails and text messages containing links to seemingly genuine websites that ask visitors to log in. However, these linked websites are fraudulent and specifically designed to steal credentials.

If you receive a call purportedly from Google followed by a link, exercise extreme caution before clicking or providing any details as it's likely a scam.

Malwarebytes has now offered advice to help users stay safe.

Here's how to dodge AI Gmail phishing

Avoid clicking on links or downloading files from unexpected emails or messages.

Refrain from entering personal information on a website unless you're sure it's legitimate.

Employ a password manager to autofill credentials only on sites you trust.

Keep an eye on your accounts for signs of unauthorised access or data leaks.

Confirm security alerts by directly visiting your Google Account page, rather than using links in emails.

Implement multi-factor authentication (MFA) for all accounts.

Safeguard your devices with up-to-date security software (like Malwarebytes Premium Security), and utilise text protection and text message filtering on your mobile device.

Want the latest Cornwall breaking news and top stories first? Click here to join CornwallLive on WhatsApp and we'll send breaking news and top stories directly to your phone. We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don’t like our community, you can check out any time you like. If you’re curious, you can read our Privacy Notice