#

Gmail Attack Update — Google Tells 3 Billion Users: Do This Next

As one of the most widely used email services in the world, Gmail has come under attack from sophisticated hackers who have managed to bypass Google's own email security protections. However, in a recent update, Google has confirmed that they are taking steps to protect their users and has shared a four-step response plan for anyone who falls victim to a phishing scam.

##

Google Responds To Hack Attacks — Confirms New Gmail Update

According to Gmail's spokesperson, Ross Richendrfer, Google is "aware of this class of targeted attack from this threat actor" and has "rolled out protections to shut down this avenue for abuse." This new update comes after an email scam was reported by users, which claimed that a subpoena had been served requiring Google to produce a copy of the account content. The email was sent from a no-reply@google.com address and appeared to be legitimate, with strict sender validation protections in place.

##

The Subpoena Gmail Update – What Happened?

The email scam targeted users by claiming that a subpoena had been served on Google, requiring them to produce a copy of the account content. The email stated that the subpoena details could be examined or measures taken to file a protest by visiting the included Google support pages. However, it was later revealed that the email was a phishing scam designed to bypass strict sender validation protections put in place to protect Gmail users.

##

Google’s Four-Step Attack Response As Gmail Update Lands

To help users identify and avoid such scams, Google has shared a four-step response plan:

1. **Do Not Make Calls On Your Phone If You Get This Message**: If you receive an email or message that appears to be from Google, do not call the number provided in the message.

2. **Verify The Email Before Responding**: Take a moment to verify the authenticity of the email before responding.

3. **Check For Misspellings And Grammar Errors**: Scammers often make mistakes in their emails and messages. Check for any grammatical errors or misspellings that may indicate a phishing attempt.

4. **Visit The Official Google Website Directly**: If you are unsure about the legitimacy of an email, visit the official Google website directly to verify the information.

##

Google’s New Gmail Security Update

In addition to the four-step response plan, Google has also rolled out new security updates to protect its users. These updates include:

* **Shutting Down Arbitrary-Length Text Mechanism**: Google has shut down the mechanism that attackers used to bypass strict DomainKeys Identified Mail (DKIM) authentication checks.

* **Improved Sender Validation Protections**: Google's security team is working on further improving sender validation protections to prevent similar phishing attacks from happening in the future.

##

Google’s Interactive Phishing Quiz

To help users test their ability to identify phishing attempts, Google has also shared an interactive phishing quiz. This quiz provides users with a series of scenarios and asks them to identify whether each message is legitimate or not. While this quiz can't replace good old-fashioned skepticism, it's still an excellent tool for staying safe online.

##

Stay Safe Online With Gmail

While the recent phishing scam was sophisticated, Google's response has demonstrated its commitment to protecting its users. By following these simple steps and staying vigilant, you can significantly reduce your risk of falling victim to such scams in the future.