Categories: NewsSecurity

New Gmail Phishing Attack Can Fool Even Tech-Savvy Users

A new phishing campaign is targeting Gmail users all over the world. To be more precise, criminals are looking to obtain Gmail login credentials, in the hopes of using these accounts across other platforms as well. So far, this technique has proven to be highly efficient, and the new campaign even succeeds in tricking tech-savvy users into giving up their credentials. A very troublesome development, and a threat to keep an eye on.

Beware Of The Latest Gmail Phishing Attack

An unknown attacker – or group of criminals – are sending emails to all Gmail accounts they can find. Some of these messages are spoofed to represent a known sender, although that is not always the case. If that is the case, however, it means the account sending this email has been compromised by this attack. Other users have reported the message containing an image to make the sender seem legitimate.

Once a user clicks on this image, a new tab opens in their browser. In this new tab, the user is asked to log in to Gmail again, which should serve as a warning sign to tech-savvy users. However, looking at the address bar, everything seems to be in order, unless one knows what to look out for.  This is the stage during which the login credentials will get compromised.

Attackers who obtain this login information will sign in to the

Gmail account in question, and try to send emails to everyone in your contact list. Every email sent will include an image to make it seems like the message was sent by the compromised account, along with a regular subject line. For all intents and purposes, the recipients will think this is a normal email message, which is what makes this phishing campaign so successful



Related Post

Unfortunately, compromised Gmail accounts are a treasure trove for criminals these days. By accessing a hacked account, the criminals gain access to all emails, as well as any other service linked to this email address. Any site using a password reset mechanism becomes a new target, allowing the crooks to compromise a wide variety of services. Even two-factor authentication services linked to this email address will be affected.

Thankfully, there are some easy ways to protect oneself from this phishing attack. First of all, it is important to take a closer look at the address bar in the new tab that opens in your browser. This phishing campaign uses a data URI, which results in a “Data: Text/HTML” snippet in front of the address bar.  Anyone spotting this must realize this tab is a downloaded file presenting a fake Gmail account login page and is not an actual website.

Unfortunately, it appears Google is not planning to undertake action against this phishing scam. The company takes no responsibility for users not looking at the address bar. No modifications will be made to the Chrome browser to prevent this type of attack either.  However, Google has modified the behavior of the address bar in the past, and there is no reason why they couldn’t do so again. Then again, it is up to potential victims to spot a phishing scam in the first place.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

WIF Set to Overtake BONK? Lunex Soars with 100x Potential in Altcoin Season

As altcoin season heats up, all eyes are on the rising stars—especially Lunex, which is…

5 hours ago

Binance Coin Price Dips: BNB Holders Rush To Lunex Presale To Hedge Their Long Positions

While the broader market witnessed a notable upward movement, Binance Coin (BNB) experienced a decline…

5 hours ago

Crypto Stalwarts Forecasted 800% Growth in Innovative Projects: VeChain, Rollblock and Polkadot!

This blazing crypto bull run has investors looking for the next top altcoins set to…

5 hours ago

Dogecoin Price Set To Recreate 36,000% Rally From 2021 After Pennant Formation

The Dogecoin price is back in the limelight, captivating the crypto world with its recent…

5 hours ago

Is XRP About to Explode? How Trump’s Victory Is Affecting XRP Price Amidst JetBolt Growth

Ripple’s XRP showed a 68% price increase in the last 7 days following Trump's victory,…

5 hours ago

Ethereum Down While Bitcoin, Solana, and JetBolt Skyrocket In End November 2024

Ethereum stumbles as Bitcoin surges past $97K, Solana eyes new highs, and JetBolt’s presale shakes…

8 hours ago