{"id":37775,"date":"2025-04-21T07:50:14","date_gmt":"2025-04-21T07:50:14","guid":{"rendered":"https:\/\/www.europesays.com\/uk\/37775\/"},"modified":"2025-04-21T07:50:14","modified_gmt":"2025-04-21T07:50:14","slug":"gmail-users-given-red-alert-warning-over-sophisticated-phishing-scam-stealing-data-as-google-works-to-stop-attack","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/uk\/37775\/","title":{"rendered":"Gmail users given \u2018red alert\u2019 warning over ‘sophisticated’ phishing scam stealing data as Google works to stop ‘attack’"},"content":{"rendered":"

GMAIL users have been issued a “red alert” warning over an advanced phishing scam which aims to steal your data.<\/p>\n

Google<\/a> has said it is currently working to stop the “extremely sophisticated attack” which looks incredibly real and could trick you into giving away sensitive personal information<\/a>.<\/p>\n

\"Photo<\/a><\/p>\n

4<\/p>\n

Gmail users have been warned over a new ‘sophisticated’ scam which aims to steal your personal informationCredit: Getty\"Woman<\/a><\/p>\n

4<\/p>\n

Google has said it is currently working on a fix to help protect usersCredit: AP\"Gmail<\/a><\/p>\n

4<\/p>\n

Developer Nick Johnson showed how the scam was sent by a seemingly legitimate Google accountCredit: Google<\/p>\n

Countless cyber crooks<\/a> regularly try to catch out the billions of people who use Gmail, but the vast majority of these are caught and blocked by Google’s filters and spam protection<\/a>.<\/p>\n

This new phishing scheme is so advanced that it can bypass much of Google’s impressive security<\/a>, meaning some users could be caught out.<\/p>\n

Developer Nick Johnson says he was targeted by the attack, which consisted of a message which suggested a legal subpoena had been issued for him.<\/p>\n

The scam also tells users that a copy of their Google account content needs to be produced.<\/p>\n

While it may sound far-fetched, people may be inclined to trust the email as it comes from a seemingly valid Google account.<\/p>\n

It is this level of hiding which concerns Nick the most.<\/p>\n

In a thread on X<\/a>, he explained: “The first thing to note is that this is a valid, signed email – it really was sent from no-reply@google.com.<\/p>\n

“It passes the DKIM signature check, and Gmail displays it without any warnings – it even puts it in the same conversation as other, legitimate security alerts.”<\/p>\n

Google’s DKIM signature check normally filters any suspicious emails, by checking their source and then places them in the spam folder, to ensure users are protected.<\/p>\n

However, since this new scam can mask itself by generating a Google domain, the spam checker sees the email as having a legitimate origin.<\/p>\n

More than one in four scammed adults felt embarrassed<\/p>\n

This means the scam turns up in your regular inbox as a seemingly valid email, rather than ending up in the spam section.<\/p>\n

Inside each email is an embedded link which, when clicked, takes users to a “very convincing” portal page where they are asked to sign in using their account name and password.<\/p>\n

If any unfortunate users input their details at this step, the scammers will instantly gain access to the highly personal data<\/a>.<\/p>\n

Google has now confirmed it is rushing to release a fix that will stop its name and email address from being used to attack Gmail account holders.<\/p>\n

In a statement to Newsweek<\/a>, a Google spokesperson said: “We’re aware of this class of targeted attack from the threat actor, Rockfoils, and have been rolling out protections for the past week.<\/p>\n

“These protections will soon be fully deployed, which will shut down this avenue for abuse.”<\/p>\n

How to protect yourself from scams<\/p>\n

BY keeping these tips in mind, you can avoid getting caught up in a scam:<\/p>\n