Gmail users are falling for this 'fake attachment' phishing scam
The scam takes users to fake landing pages that ask for login information
The scam takes users to fake landing pages that ask for login information
The scam takes users to fake landing pages that ask for login information
A continues to target users, tricking even internet-savvy account holders into handing over personal credentials. The campaign is extremely clever - it sends messages to recipients posing as friends or relatives, and then asks them to click on an attachment. Victims are then taken to a fake Google sign-in page that asks them to enter their login info.
The catch? The attachments aren't legit - they're fraudulent images created to look just like attachments that link to a counterfeit sign-in page.
An example can be seen below:
Unfortunately, campaigns like this are happening more frequently - and they're getting more sophisticated. Hackers frequently trick people by sending emails from false addresses or using Photoshopped images that look like real browsers.
Even the locations of these virtual assaults are becoming increasingly difficult to track. Many breaches appear to be from servers in US data centers, but hackers are actually located overseas and are able to scramble their locations.
Learn how to protect yourself from phishing .