A new concerning online threat has emerged, targeting Gmail users with potential account breaches. Hackers are devising sophisticated methods to trick individuals into surrendering sensitive information, leading to unauthorized access to email and other accounts.

The latest scam, identified by Malwarebytes, specifically aims at Gmail users, luring them into a trap with deceptive tactics. The scheme initiates with a fraudulent message purportedly from Google Support, claiming unauthorized access attempts on the account and prompting a password reset. In some cases, the email is followed by a phone call to further authenticate the scam.

In this elaborate ploy, hackers aim to acquire the security code sent by Google during a password reset. If successful, they can exploit this information to infiltrate the account and pilfer personal data.

According to Malwarebytes, victims receive alerts via email or phone calls, allegedly from Google support, urging them to reset their passwords as a security measure. Subsequently, victims receive a separate email for account reset, where they unknowingly disclose their login credentials. The email includes a verification code that victims are instructed to provide to confirm their identity. Unbeknownst to the victim, scammers exploit this moment to hijack the account.

Although the extent of this issue remains unclear, several Google users have reported being targeted recently. One user shared their experience on Reddit, revealing attempts to seize control of their account during a phone call.

To enhance the illusion of authenticity, scammers may prompt victims to verify their call-back number, creating a false sense of legitimacy. However, as observed by the Redditor, attempting to contact the number provided results in no human response, exposing the scam.

If you receive any communication from Google requesting an account reset, exercise caution as it is likely a fraudulent scheme. Google has issued warnings against sharing personal data with unauthorized entities, emphasizing that the company does not charge users for account recovery services or password changes. Additionally, Google does not offer phone-based support for Gmail, and any such calls are not affiliated with the company.