Look at fraud: Fake message uses Google sites and hidden to steal the account E -Mail

Ramishing initiatives containing fake e -mails passing through a company are common, but the people are increasingly aware of it and avoid the fraud. However, a new type of identity hunting identified by almost victims, sophisticated and Use of Services Google To mask your own identity.

Complaints came from Nick Johnson Crypto Money Industry developer and a fraudulent technology like Andrew Chen. Both shared the experience in the social network X, which was former Twitter.

In this coup, The person receives an e -mail allegedly from Google about a court subpoena containing the profile of the victim.. The difference is the maintenance of cyber criminals with some elements that often explore a violation of a violation of the company’s own authentication infrastructure.

How does it work on the scam using Google websites?

The program starts with a message sent to potential victims. E -Posta warns you about a false judicial court subpoena that requires copying of some account information for use in an investigation.

The most remarkable thing to E -Post Posted by, who It looks like Google’s own service. Also, when entering the specified page, You were directed to a site that increases the visual identity of support. your company.

Those who look at the site eventually encounter an entrance screen. This is when scammers are trying to convince you to enter Google’s entry and password to steal access to the account. To have these data, It is possible to access not only e -mail but also connected services. (Such as documents on Google Drive) and the final pages that use Google as an input method.

How to define fraud in an e -mail

Although it is extremely sophisticated, the coup has some points that may suspect more attentive people. To start, The message is on the body of the text and in a weak diagram format without a clicked connection.

Besides, The place where you are directed is hosted on Google Sites. Although it is an area of ​​the company, it is a free service and hosting service for individual pages. Congratulations and official services tend to bring “accounts.google.com” to URL.

However, the most difficult point to detect is E -Posta address – and this is the most important feature of safety fraud, as it can add a legitimate communication to the sending area from Google. However, it does this from a sophisticated way to overcome the company’s protection.

Scammers Place the entire E -Posta text in a Google Identity Service And they can make it manage the company’s signature message. By copying the original verification code, they usually overcome the SO -CALLED dominkeys -defined mail, which usually detects and blocks those who try to pass through the company.

It is possible to notice Gambiarra only when checking the addresses in the message: initially sent by a special e-mail instead of the company itself (MALED) and does not bring the user’s individual address (TO) and is included in another buyer.

What does Google say about scamma

Google was contacted by some people who received and received messages, but at the beginning did not comment on the case. Social media publications sent an official statement after publishing complaints of viralized and specialized vehicles.

According to the website DonkeyThe company confirmed this He is aware of the attack and has already started working on solutions to close this violation. Criminal use of authentication.

He also suggested that the community protects its own accounts with safer entry. “On this, We encourage verification to accept users on two factors and switchesIt guarantees a strong protection against this kind of identity hunting campaign, “he says.

Would you like to know what access switches are and understand the safe ways of changing or supporting passwords? Check out this special tecmundo content!