Categories: NewsSecurity

New Gmail Phishing Attack Can Fool Even Tech-Savvy Users

A new phishing campaign is targeting Gmail users all over the world. To be more precise, criminals are looking to obtain Gmail login credentials, in the hopes of using these accounts across other platforms as well. So far, this technique has proven to be highly efficient, and the new campaign even succeeds in tricking tech-savvy users into giving up their credentials. A very troublesome development, and a threat to keep an eye on.

Beware Of The Latest Gmail Phishing Attack

An unknown attacker – or group of criminals – are sending emails to all Gmail accounts they can find. Some of these messages are spoofed to represent a known sender, although that is not always the case. If that is the case, however, it means the account sending this email has been compromised by this attack. Other users have reported the message containing an image to make the sender seem legitimate.

Once a user clicks on this image, a new tab opens in their browser. In this new tab, the user is asked to log in to Gmail again, which should serve as a warning sign to tech-savvy users. However, looking at the address bar, everything seems to be in order, unless one knows what to look out for.  This is the stage during which the login credentials will get compromised.

Attackers who obtain this login information will sign in to the

Gmail account in question, and try to send emails to everyone in your contact list. Every email sent will include an image to make it seems like the message was sent by the compromised account, along with a regular subject line. For all intents and purposes, the recipients will think this is a normal email message, which is what makes this phishing campaign so successful



Related Post

Unfortunately, compromised Gmail accounts are a treasure trove for criminals these days. By accessing a hacked account, the criminals gain access to all emails, as well as any other service linked to this email address. Any site using a password reset mechanism becomes a new target, allowing the crooks to compromise a wide variety of services. Even two-factor authentication services linked to this email address will be affected.

Thankfully, there are some easy ways to protect oneself from this phishing attack. First of all, it is important to take a closer look at the address bar in the new tab that opens in your browser. This phishing campaign uses a data URI, which results in a “Data: Text/HTML” snippet in front of the address bar.  Anyone spotting this must realize this tab is a downloaded file presenting a fake Gmail account login page and is not an actual website.

Unfortunately, it appears Google is not planning to undertake action against this phishing scam. The company takes no responsibility for users not looking at the address bar. No modifications will be made to the Chrome browser to prevent this type of attack either.  However, Google has modified the behavior of the address bar in the past, and there is no reason why they couldn’t do so again. Then again, it is up to potential victims to spot a phishing scam in the first place.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

Aptos (APT) and Tron (TRX) Prices Slide, As Volume Soars For Rollblock Suggesting Parabolic Rally

As Aptos and Tron prices take a recent downturn, the spotlight shifts to Rollblock, whose…

2 hours ago

Altcoins to Watch in November: Binance Coin (BNB), Rollblock (RBLK), and Neiro (NEIRO)

As the crypto markets roll into their most bullish time of year, we present three…

2 hours ago

Analysts Forecast $1 for Cardano and Lunex Network As Dogwifhat Plunges To Former Lows

As the crypto market prepares for a major rally, experts believe that two top altcoins,…

2 hours ago

Retail Traders Panic Sell During ‘Fake Dip’; Whales Hold Tight to SOL, DTX, and SHIB for a Millionaire-Maker Bull Run

Solana (SOL): A Strong Ecosystem Despite Volatility Solana (SOL) has been all over the place…

3 hours ago

Llama 3.2 Predicts Price For Dogecoin: $2 Peak By 2025 And $5 Rally For DTX Exchange This Winter

Cryptocurrency trends are keen on the forecast that was recently released by Llama 3.2 model…

4 hours ago

Crypto Whale Sparks 8x Surge In $OPK Price with Massive Buy-in

A mysterious crypto whale, who previously invested 9,600 SOL into tokens $Pnut and $FRED, has…

6 hours ago