An artificial intelligence scam targeting almost two billion people using Google's Gmail function has been labelled as having 'devastating' impacts on its victims.
Keeping our data safe from those looking to steal it is an increasingly difficult thing to do in a world where you're only one wrong click away from opening up your device and passwords to someone willing to rinse you dry.
Whether identity theft or something as simple but brutal as emptying your bank account, victims are left mortified when they release they've become victims to something they never thought would target them.
Advert
And now, 1.8 billion Gmail users have been put on alert by cybercriminals using AI to fake extremely realistic phone calls.
They're also sending out that appear to be legitimate emails that are not at all what they seem.
The scam sees innocent bystanders targeted with the AI call before being told they're being sent an email with a link in which they are asked to click through to a website that looks incredibly similar to Google. It's not legitimate, though.
Advert
Pressing that link the scammers send you will grant them access to potentially steal your identity, information, and money.
Spencer Starkey, a vice-president at SonicWall, warned: "Cybercriminals are constantly developing new tactics, techniques, and procedures to exploit vulnerabilities and bypass security controls, and companies must be able to quickly adapt and respond to these threats.
"This requires a proactive and flexible approach to cybersecurity, which includes regular security assessments, threat intelligence, vulnerability management, and incident response planning."
In a post about the subject this week, malware intelligence researcher Pieter Arntz addressed the issue over on anti-malware software website, Malwarebytes.
Advert
Arntz wrote: "This warning should not be taken lightly. This is especially because the AI tools that cybercriminals have at their disposal are relatively low cost. In one study, researchers found that the cost of advanced and sophisticated email attacks starts at just $5 (£4)."
It references a 2024 warning from the FBI on the issue.
FBI Special Agent in Charge, Robert Tripp, said at the time: “Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.
"These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”
Advert
The FBI warned about unsolicited emails and text messages, saying AI was at the heart of these phishing attacks.
On avoiding becoming a victim of the AI Gmail phishing scam, Malwarebytes recommends you never click on links or download files from unexpected emails or messages.
Importantly, you should also only use a password manager to autofill credentials on trusted sites and use multi-factor authentication (MFA) for every account you have.
"Verify security alerts by visiting your Google Account page directly instead of using links in emails," it adds.
Topics: Crime, Google, World News, US News, Technology
Tom Earnshaw