Rishika Shahi
As technology evolves, so do the tactics employed by cybercriminals. Recent reports indicate that billions of Gmail users are increasingly vulnerable to sophisticated AI spoofing attacks, where malicious actors use artificial intelligence to create convincing phishing emails that mimic legitimate communications. This alarming trend underscores the importance of securing your Gmail account to protect your personal information and maintain your online safety. Here’s how you can enhance your security and safeguard against these threats.
The AI misuse
Yes, there are applications for AI. Even though the majority of big businesses have created AI models to benefit humanity, some people constantly use it for the wrong purposes. Using AI for “spoofing” to take over digital accounts, such as Gmail, the most widely used email service provider in the world, is one example.
Gmail has more than 2.5 billion accounts, making it a prime target for hackers. They have just developed a new technique known as a “super realistic AI scam call” that can deceive even tech-savvy users.
CloudJoy creator and security product specialist Sam Mitrovic recently wrote a thorough blog post about how he was recently tricked. An email that looked like an approval notification for the recovery of his Gmail account was sent to him. A phone call with the caller ID “Google Sydney” appeared after the denial.
A week later, he got a call and another Gmail recovery message. The call originated from a real phone number that was listed on Google’s help page, just like the first time. The caller said that the personal information associated with his account had been downloaded and that he had been signed in from abroad for more than a week.
People being scammed through gmail
Following this, he received an email at his request informing him of the same problem in text format. Almost anyone may be tricked by the email’s Google domain. Mitrovic began investigating after he got the call because he thought it was a hoax. He verified that it was, in fact, a spoofing attempt to take over his Gmail account with the aid of online forums such as Reddit.
Most users will be fooled into thinking the communication is from Google if they see a phone number that is exactly the same as Google Workspace support, an email with a Google domain that has been spoofing done with a Salesforce CRM (which allows users to use any domain name when needed), and an AI voice bot that sounds authentic.
These scams, such as the well-known Jamtara cyber scams in India, required real human resources to make the voice call until a few years ago. But it has gotten much easier with the introduction of AI speech models that sound authentic. Now, thousands of these attempts may be made at once by a troublemaker with ease.
This case demonstrates how hackers deceive legitimate people by using a variety of tactics, such as phony phone numbers, emails, and AI bots. There is currently no infallible method to stop this from occurring. Nonetheless, you may protect your Gmail account by being watchful. Our Gmail account serves as both our personal and professional digital identities in the modern day.
Some conclusions:
Seldom will Google give you a call about your Gmail account: They will usually email you first, using an email address associated with your Google domain, unless your account is tied to a Google Business Profile.
Cross-check the number if you receive a questionable call and you have a Google business profile: Check if other people have reported the number as “scam” by using services like Truecaller.
Check your Gmail activity on a regular basis: To examine account activity if you suspect unauthorized access, click on your profile picture and select Manage your Google account > Data & Privacy > My Activity.
Hackers will use complex techniques to impersonate people and access digital accounts in order to steal private information in this day and age, when data is the new gold.
GIPHY App Key not set. Please check settings