Latest developments and curiosities in the world of technology
A tricky Gmail phishing scam is tricking users into handing over their private info
A tricky Gmail phishing scam is tricking users into handing over their private info
A newly discovered phishing scam is tricking even the most tech-savvy Gmail users into handing over their login information. According to security researchers, the newly discovered attack takes users to a well-disguised website that mimics the Gmail login page. Once the user enters their password, attackers gain access to their emails and contact list.
globalnews.ca




I've encountered a phishing email like this before, but not quite as sophisticated. I got an email from an acquaintance with a link to a "Google Doc". Clicking the link redirected me to a webpage on Google Drive made to look like a Google login screen. Since googledrive.com webpages have a google-issued SSL cert and Google Drive webhosting was still a new service (that I hadn't heard of), it was hard to tell that the page wasn't legitimate. Fortunately, I was suspicious because I knew logins usually go through accounts.google.com, so I typed in a fake email and password. Sure enough, after entering it, I got redirected to a shady website.
I sent my acquaintance a reply afterwards telling her to change her Gmail password.
...that is actually impressive. And scary ._.