There is a new security warning for email users as cyber attacks are targeting Google and Gmail accounts. Despite these platforms being highly secure with advanced spam filtering and multi-factor authentication, recent reports confirm that Russian hackers have managed to circumvent some of Google’s security measures, leaving certain accounts vulnerable to attacks.
Security researchers at Google Threat Intelligence Group have identified this new threat, with targeted attacks already occurring. The method involves exploiting older devices that cannot handle the additional security verification steps required by Google accounts, such as two-factor authentication. Hackers have been utilizing app passwords, special 16-digit codes offered by Google for less modern devices, to gain unauthorized access to accounts.
According to experts at Malwarebytes, these cybercriminals have used the tactic to target influential individuals critical of Russia. By posing as a State Department representative and tricking targets into sharing app passwords, hackers have successfully breached Google accounts. While this attack has been focused on specific targets, there is a risk that similar social engineering tactics could be used against the general public to steal personal data.
To safeguard against such threats, Malwarebytes security experts have recommended the following 6 guidelines:
– Use app passwords sparingly and switch to more secure sign-in methods when possible.
– Opt for stronger multi-factor authentication methods like authenticator apps or hardware security keys over SMS-based codes or app passwords.
– Educate yourself and others on identifying phishing attempts to prevent credential theft.
– Keep your operating system and applications updated to patch vulnerabilities that attackers could exploit.
– Monitor and restrict unusual login activities and suspicious behavior.
– Employ security software that can detect and block malicious domains and scams.
By following these security practices, users can better protect themselves from potential cyber threats and safeguard their online accounts.