Google's Gmail Warning: Hackers Gain Access To User Accounts

Google has issued a warning to its users about the rising number of Gmail attacks, where hackers steal passwords to gain access to accounts.

The company warns that attackers know how to exploit security warnings and use them to frame their attacks. For example, if you receive an email from Google stating that your account was blocked due to suspicious activity, the attacker may try to copy this email to steal other people's account information.

Google advises its users not to click on any links or buttons within the email itself, but instead go to their Google Account and click on the "security" tab. From there, they can review recent security events and take action if necessary.

If you do receive a suspicious email purporting to be from Google, it's essential to never click on any links or enter your login credentials into a fake sign-in page. This can lead to your account being hijacked by hackers, who will then have access to all your personal information.

The issue is not limited to Gmail users. Hackers are using fake voicemail notifications to steal login credentials and gain access to accounts. Malware analyst Anurag flagged this issue on Reddit, stating that attackers use legitimate services like Microsoft Dynamics and SendGrid to bypass filters and capture user data through encrypted channels.

Staying alert and performing deep inspections of suspicious emails is crucial in preventing phishing attacks. Android Police has offered some advice for Gmail users, including using passkeys and shoring up two-factor authentication with something other than SMS.

The company also warns against relying on "plus addressing" (yourname+alias@gmail.com), which is not a substitute for a genuine alias. Instead, using email aliasing services like Proton, Firefox, or DuckDuckGo can provide a more robust system for masking your real email address and generating unique, random addresses for every website or service you sign up for.

These services allow you to forward incoming mail to your primary inbox while keeping your original email address private. You can also shut off an email address if it starts receiving spam and reply anonymously.

The Risks and How to Secure Your Accounts

Account hijacks are painful, and recovering lost accounts can be time-consuming. However, with the right precautions, you can protect yourself from these attacks.

The key rule is to never use links to access your accounts. Instead, always use your app or sign-in page you usually use in your browser. Adding passkeys to your Google, Amazon, and other accounts can also help stop hijacks.

It takes just seconds to secure your accounts, but the consequences of not doing so can be severe. Hackers may steal your login credentials, access your personal information, and even take control of your account.