​​Gmail is used by nearly 2.5 billion users worldwide, making it a frequent target for scammers. If you use Gmail, you’ve probably encountered phishing emails impersonating popular companies like Microsoft, Google, Apple and others. These scams are often easy to spot due to suspicious email addresses and other red flags like poor grammar or urgent requests for personal information.

However, a new AI-powered scam is making the rounds, and it’s much harder to detect unless you’re very cautious. Wondering how this scam works and how to protect yourself? I’ve got you covered. In this article, I’ll share a real-life example and provide practical tips to safeguard your information.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

How does this scam work?

Sam Mitrovic, a Microsoft solutions consultant, shared his experience of being targeted by an elaborate scam that preyed on Gmail users. He recounted how it all started with a seemingly innocent notification:

“Recently, I received a notification to approve a Gmail account recovery attempt. The request originated from the United States. I denied the request and, about 40 minutes later, received a missed call. The missed call showed the caller ID as Google Sydney.”

Sam shrugged off the missed call, but the pattern repeated exactly one week later. He received another Gmail account recovery notification from the U.S. followed again by a call. This time, he answered.

“It’s an American voice, very polite and professional. The number is Australian. He introduces himself and says that there is suspicious activity on my account. He asks if I’m travelling (sic). When I said no, he asks if I logged in from Germany to which I reply no. He says that someone has had access to my account for a week and that they have downloaded the account data. (I then get a flashback of the recovery notification a week before).”

Sam quickly Googled the phone number, and it appeared in Google’s official documentation. Still skeptical, he asked the caller to send an email for verification. When the email arrived, the sender seemed legitimate at first glance, coming from a Google domain. However, Sam noticed a red flag: The “To field” contained an email address named GoogleMail at InternalCaseTracking dot com. This address doesn’t belong to Google.

Upon doing research, Sam discovered that the person on the other end wasn’t human but AI. This approach is part of a well-known phishing methodology aimed at confirming account recovery or password resets. But when combined with AI calls and email spoofing, this scam becomes particularly dangerous.

Scammers can target Gmail’s account recovery notifications. (Kurt “CyberGuy” Knutsson)

WINDOWS FLAW LETS HACKERS SNEAK INTO YOUR PC OVER WI-FI

How are scammers spoofing Google’s email address?

Mitrovic pointed out that scammers spoofed the sender’s email address to make it appear as if it were from Google. They utilized Salesforce CRM, a platform that enables users to customize the sender information to anything they choose while sending emails through Gmail and Google servers.

CyberGuy reached out to Google for a comment but did not receive a response by the time of publication.

BEST ANTIVIRUS FOR MAC, PC, IPHONES AND ANDROIDS – CYBERGUY PICKS

Scammers can spoof Google’s email address. (Kurt “CyberGuy” Knutsson)

CYBERSCAMMERS USE AI TO MANIPULATE GOOGLE SEARCH RESULTS

5 ways to protect yourself from Gmail AI scam

1) Understanding Google’s automated support system: Google has billions of users, so contacting them regarding any issue requires significant resources. Everything is automated, and Google doesn’t call Gmail users unless they have a connected Google Business Profile.

2) Inspect email addresses carefully: Always check the email address carefully. In this case, the email included a recipient address that was not associated with a Google domain. Additionally, there were no other active sessions on the victim’s Google account besides his own.

3) Be cautious with links and attachments: Avoid clicking on links or downloading attachments from unknown or suspicious emails. Instead, navigate directly to the website by typing the URL into your browser.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.

4) Enable two-factor authentication (2FA): Use 2FA on your accounts to add an extra layer of security. This requires a second form of verification, such as a text message or authentication app, making it harder for scammers to gain access even if they have your password.

5) Regularly monitor your accounts: Keep a close eye on your accounts for any unusual activity. Set up notifications for login attempts and changes to your account information. Early detection can prevent further damage.

DON’T LET SNOOPS NEARBY LISTEN TO YOUR VOICEMAIL WITH THIS QUICK TIP

Kurt’s key takeaway

While AI has some useful applications, it is more actively exploited by scammers to make their schemes more believable. The Gmail AI scam demonstrates how AI can make scams harder to detect, and anyone who isn’t careful may fall victim to these scams. Google should work on improving scam filters to ensure that these impersonation scams do not reach people’s mailboxes. You can also do your part by being cautious and avoiding unknown links.

How confident are you in your ability to identify a scam? What resources do you use to educate yourself about online security? Let us know by writing us at Cyberguy.com/Contact.

The Federal Police of Brazil announced the arrest of the hacker linked to a breach that leaked 2.9 billion records that included sensitive personal information, including some Social Security numbers. The data from that hack, which came to light in August, was put for sale on the dark web in April by an entity identifying themselves as USDoD.

As pointed out by Bleeping Computer, according to a machine translation of the department’s press release, the hacker was linked to “two publications selling” federal police data. The hacker also boasted of disclosing the personal data of 80,000 members of the FBI’s InfraGard program, the department said.

Security researchers at Atlas have created a tool to search the leaked records and told PCMag that the leak contains about 272 million unique SSNs, along with as many as 600 million phone numbers. National Public Data and its parent company, Jerico Pictures, filed for Chapter 11 bankruptcy earlier this month, facing a flood of lawsuits and potential penalties over the incident.

“The person under investigation must answer for the crime of hacking into a computer device, qualified by obtaining information, with an increase in the sentence for the commercialization of the data obtained,” according to the translation. The operation to arrest the hacker was called “Operation Data Breach.”

The federal police says it will continue to investigate if the hacker made any other breaches.

Technology can be wonderfully convenient and provide a great deal of entertainment, but it can also be a great way to improve your everyday life, too. For those who experience visual challenges, a variety of apps and features can help you. That’s why we love this question about apps and features that can help visually challenged loved ones:

“I am not tech savvy. I need to know if there is an app that I can download on a phone, that will allow my mother to tell the app, without needing internet services, who she wants to make a phone call to? She’s losing her eyesight and can no longer see the numbers on her phone. She’s 88 years old and doesn’t own a computer and has limited income,” writes “Sheryl” of Westminster, Colorado.

It’s great that you are looking out for your mother’s specific needs. Below are several voice dialing apps and features that can help her make calls without having to see the numbers.

GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE

Best apps and features for the visually challenged to make calls

As long as the numbers are already programmed into your phone, you can use some of these apps and features to call out even if you’re visually challenged.

Apps and features for iPhone

For apps and features that work specifically on the iPhone to enhance capabilities for the visually challenged, check out the options below:

1. Siri (iOS): If you have an iPhone, you can use Siri to make phone calls by simply saying, “Hey Siri, call [contact name].” However, if you prefer or if “Hey Siri” isn’t enabled, you can also press and hold the side button (or the Home button on older iPhones) to activate Siri manually. Siri can work offline for basic tasks like making phone calls. You’ll also want to check out how to get your phone to read articles aloud.

SIMPLE IPHONE HACK MAKES READING EVERY APP EASIER

2. Point and Speak feature: With iPhones that have a Lidar sensor and run iOS 17 or later, you can use the “Point and Speak” feature using the steps below:

“Point and Speak” feature on iPhone (Kurt “CyberGuy” Knutsson)

• Open the Magnifier app on your iPhone. You can find it in the Utilities folder by searching for it in Spotlight or swiping down from the top right of your screen.
• Tap the Detect mode icon in the bottom right corner. It looks like a square with a circle inside it.
• Tap the Point and Speak icon in the bottom left corner. It looks like a hand pointing to three lines.
• Hold your iPhone about 12 inches away from the text you want to read and point the camera at it.
• Use your other hand to point at the text you want your iPhone to speak. Your iPhone will highlight the text in yellow and read it aloud.
• If you don’t hear the speech feedback, click the circular gear icon on the upper left of the screen. Then click Point and Speak and make sure Speech is toggled on. Then click the left arrow Back buttons in the upper left and tap Done. 

AIRPODS PRO 2 VS. A CUTTING-EDGE HEARING AID: WHICH ONE OFFERS BETTER SOUND?

3. VoiceOver (iOS): This is an accessibility feature built into iPhones that provides spoken feedback to help users navigate their devices. It can be used in conjunction with Siri to make phone calls. Here are the steps:

• Open Settings: Tap on the Settings app on the home screen.
• Go to Accessibility: Scroll down and tap on Accessibility.
• Enable VoiceOver: Under the Vision section, tap on VoiceOver and then toggle the switch to turn it on.
• Once VoiceOver is enabled, you can use it to navigate your iPhone with spoken feedback. To make a phone call using Siri with VoiceOver enabled, you can follow these steps: 1) Activate Siri: You can either say “Hey Siri” or press and hold the Home button (or the Side button on newer iPhones) until Siri activates; 2) Give the Command: You can then say, “Call [contact name].”
• VoiceOver will provide spoken feedback throughout the process, making it easier for you to navigate and confirm actions.

CLICK HERE FOR MORE US NEWS

Voiceover feature on iPhone (Kurt “CyberGuy” Knutsson)

Apps and features for Android

For apps and features that work specifically for an Android to enhance capabilities for the visually challenged, check out the options below:

1. Google Assistant (Android): Similar to Siri, Google Assistant can be used on Android phones to make calls. You can do this by saying “Hey Google” or by holding down the home button on your phone. Once Google Assistant is activated, you can say commands like:

• “Call [contact name]” to call someone in your contacts
• “Call [business name]” to call a business
• “Call [phone number]” to dial a specific number

Additionally, Google Assistant can perform various tasks offline, such as setting reminders, playing music or sending texts. Just give it a try and see how it can make your daily tasks easier.

Google Assistant on Android (Google)

8 ACCESSIBILITY TIPS TO MAKE LIFE EASIER USING YOUR ANDROID 

2. Voice Access (Android): This app lets you control your phone using voice commands. It can be particularly helpful for those with visual impairments. Once set up, you can use voice commands to make calls.

Voice Access on Android (Google Play)

• Unlock your Android device, then open your device’s Settings app.
• Select Accessibility
• Select Voice Access
• Select Use Voice Access
• Start Voice Access in one of these ways: 1) If “Hey Google” detection is on, you can say, “Hey Google, Voice Access”; 2) Open your notification shade and select Touch to start; 3) On your Home screen, tap the Voice Access app; 4) Select the Voice Access activation button. (Need to set up the activation button? Go to Settings > Accessibility > Voice Access > Settings > Activation button.)
• Say a command, such as “Open Gmail”

CAN’T HEAR OR SEE WELL? IPHONE SETTINGS TO MAKE HEARING AND SEEING EASIER

Kurt’s key takeaways

The technological advancements in modern mobile phones can really improve the ability of those with visual impairments to utilize technology to the fullest. After all, if you can’t utilize the standard features to call out on your mobile device, it fails to achieve its most basic function. Between the ability of Siri, Google Assistant or other voice-activated apps to respond to verbal commands (with a simple click of a button or verbal request) to the accessibility features’ ability to help verbally navigate your phone, even those experiencing visual challenges can optimize the power of their phones and stay in touch with their loved ones.

Most people have heard of Siri or Google Assistant, but have you taken advantage of the Voice Access app or VoiceOver features? What accessibility features have come in both handy and absolutely necessary for staying in touch with your loved ones? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Follow Kurt on his social channels:

Answers to the most asked CyberGuy questions:

New from Kurt:

Copyright 2024 CyberGuy.com. All rights reserved.