![\"Gmail](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/12\/1765301288_535_0x0.jpg\")
<\/p>\n<\/p>\n
Beware this message \u2014 it\u2019s an account hack.<\/p>\n
dpa\/picture alliance via Getty Images<\/p>\n
Updated on Dec. 9 with another message attack now targeting users.<\/p>\n
America\u2019s cyber defense agency now warns Google, Microsoft and Apple users<\/a> to secure their accounts \u2014 change passwords, remove SMS two-factor authentication and add passkeys. But hackers are quickly evolving their attacks. Even a message from Google, Apple or Microsoft may be an attack, as hackers target your accounts.<\/p>\n Apple warns attacks now use \u201csophisticated tactics to persuade you to hand over personal details such as sign-in credentials (and) security codes.\u201d Last month, these tactics made headlines<\/a>, with hackers triggering automated Apple security messages at the same time as calling the target, pretending to be from Apple Support.<\/p>\n ForbesGoogle Just Made Pixel Unbeatable\u2014All Other Phones Left BehindBy Zak Doffman<\/a><\/p>\n Google Account holders face the same threats. One Redditor<\/a> has just asked how an attacker can \u201csend Google Security Prompts directly to my phone?\u201d The answer is that anyone can initiate an account recovery process for your address. That\u2019s why these prompts tell you to ignore the message unless you triggered it yourself.<\/p>\n But in this case \u2014 just as with the recent Apple attacks \u2014 there was a person on the phone from \u201cGoogle\u2019s security team\u201d at the same time. It\u2019s that combination \u2014 an attack mixed with automated, legitimate messages that\u2019s the convincer. Then the caller asks you to read out one of these automated codes, and you lose your account.<\/p>\n It\u2019s easy to stay safe. \u201cIf you get an unsolicited or suspicious phone call from someone claiming to be from Apple or Apple Support, just hang up,” says Apple<\/a>. And Google says exactly the same. \u201cPlease reiterate to your readers,\u201d the company asked me<\/a>, \u201cthat Google will not call you to reset your password or troubleshoot account issues.\u201d<\/p>\n It really is that simple. If you get the call, it\u2019s an attack.<\/p>\n As for unexpected security prompts, if you have not initiated an account recovery process or clicked to reset a forgotten password or changed a device, then you must ignore the prompts or messages. Do not click. Do not share codes via email, text or call. Do not engage with anyone contacting you at that same time. It\u2019s always an attack. <\/p>\n With perfect timing, a new Microsoft warning adds to the recent Apple and Gmail alerts for this devious kind of attack. Per SpiderLabs<\/a>, \u201cwe’ve analyzed an attack chain starting with social engineering and ending with fileless malware execution.\u201d<\/p>\n