Gmail users warned to follow advice as 'red alert' issued

Gmail users have been warned to be vigilant against an alarming scam using new methods to steal personal details and hijack entire accounts. The advanced and 'devastating' frauds are now using AI to dupe unsuspecting email owners, making it easy for some to be misled.

Alerts about this new threat were issued as early as May last year when the FBI in America noticed a surge in Artificial Intelligence scams. Some scams were so serious that victims had both funds and identities stolen by online crooks.

FBI Special Agent in Charge Robert Tripp remarked at the time: "Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike. These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data."

In the wake of these incidents, more individuals have found themselves in the crosshairs of such scams. Security firm Malwarebytes has since released fresh advice on what signs to look out for and methods to maintain safety.

They note that these scams often begin with phone calls alleging that the recipients' Gmail accounts are under threat. This is often followed by an official-looking email seemingly dispatched from Google itself, reports the Mirror.

"The goal is to convince the target to provide the criminals with the user's Gmail recovery code, claiming it's needed to restore the account," explained Malwarebytes. If the target is deceived, the criminals gain access not only to their Gmail but also to numerous other services, potentially leading to identity theft.

One individual who was targeted has shared his experience in a detailed blog post. Sam Mitrovic, a Microsoft solutions consultant, received a notification requesting approval for a Gmail account recovery attempt.

This was followed by a call, which seemed authentic, alerting him to suspicious activity on his account. Fortunately, Mitrovic sensed something amiss and ended the call.

"The scams are getting increasingly sophisticated, more convincing and are deployed at ever larger scale," Mitrovic stated. "People are busy and this scam sounded and looked legitimate enough that I would give them an A for their effort. Many people are likely to fall for it."

In addition to these account recovery scams, the FBI has issued another warning about unsolicited emails and text messages containing links to seemingly legitimate websites asking visitors to log in. However, these linked websites are fraudulent, specifically designed to steal credentials.

If you receive a call from Google followed by a link, exercise extreme caution before clicking or providing any details as it's likely a scam. Malwarebytes has now offered advice to help users stay safe from AI Gmail phishing.

The advice states:

• Never click on links or download files from unexpected emails or messages.

• Don't enter personal information on a website unless you are certain it is legitimate.

• Use a password manager to autofill credentials only on trusted sites.

• Monitor your accounts for signs of unauthorised access or data leaks.

• Verify security alerts by visiting your Google Account page directly instead of using links in emails.

• Use multi-factor authentication (MFA) for all accounts.

• Protect your devices with up-to-date security software (such as Malwarebytes Premium Security), and use text protection and text message filtering on your mobile device.