![\"Gmail](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2025\/12\/1765424770_263_0x0.jpg\")
<\/p>\n<\/p>\n
Beware this message \u2014 it\u2019s an account hack.<\/p>\n
dpa\/picture alliance via Getty Images<\/p>\n
Updated on Dec. 10 with a new warning these attacks are now surging 449%.<\/p>\n
America\u2019s cyber defense agency now warns Google, Microsoft and Apple users<\/a> to secure their accounts \u2014 change passwords, remove SMS two-factor authentication and add passkeys. But hackers are quickly evolving their attacks. Even a message from Google, Apple or Microsoft may be an attack, as hackers target your accounts.<\/p>\n Apple warns attacks now use \u201csophisticated tactics to persuade you to hand over personal details such as sign-in credentials (and) security codes.\u201d Last month, these tactics made headlines<\/a>, with hackers triggering automated Apple security messages at the same time as calling the target, pretending to be from Apple Support.<\/p>\n Google Account holders face the same threats. One Redditor<\/a> has just asked how an attacker can \u201csend Google Security Prompts directly to my phone?\u201d The answer is that anyone can initiate an account recovery process for your address. That\u2019s why these prompts tell you to ignore the message unless you triggered it yourself.<\/p>\n ForbesApple\u2019s iPhone Security\u2014Even Putin Can\u2019t Beat iMessageBy Zak Doffman<\/a><\/p>\n But in this case \u2014 just as with the recent Apple attacks \u2014 there was a person on the phone from \u201cGoogle\u2019s security team\u201d at the same time. It\u2019s that combination \u2014 an attack mixed with automated, legitimate messages that\u2019s the convincer. Then the caller asks you to read out one of these automated codes, and you lose your account.<\/p>\n It\u2019s easy to stay safe. \u201cIf you get an unsolicited or suspicious phone call from someone claiming to be from Apple or Apple Support, just hang up,” says Apple<\/a>. And Google says exactly the same. \u201cPlease reiterate to your readers,\u201d the company asked me<\/a>, \u201cthat Google will not call you to reset your password or troubleshoot account issues.\u201d<\/p>\n It really is that simple. If you get the call, it\u2019s an attack.<\/p>\n As for unexpected security prompts, if you have not initiated an account recovery process or clicked to reset a forgotten password or changed a device, then you must ignore the prompts or messages. Do not click. Do not share codes via email, text or call. Do not engage with anyone contacting you at that same time. It\u2019s always an attack. <\/p>\n With perfect timing, a new Microsoft warning adds to the recent Apple and Gmail alerts for this devious kind of attack. Per SpiderLabs<\/a>, \u201cwe’ve analyzed an attack chain starting with social engineering and ending with fileless malware execution.\u201d<\/p>\n ForbesGmail, Outlook, Teams And Slack Users Now At Risk From \u2018Uncontrolled Threat\u2019By Zak Doffman<\/a><\/p>\n The security team explains that a victim \u201creceives a Teams call from an attacker impersonating Senior IT Staff (spoofed display name). The Attacker convinces user to launch QuickAssist. ~10 mins later: Redirected to ciscocyber[.]com\/verify.php. (Then) \u2018updater.exe\u2019 deployed (disguised as legitimate updater).\u201d<\/p>\n GBHackers<\/a> explains that \u201cthe infection sequence begins via a social engineering vector in which threat actors impersonate Senior IT Staff by spoofing display names in Microsoft Teams call notifications. Victims receive unexpected calls from what appears to be legitimate internal IT support personnel.”<\/p>\n In a Dec. 10 report, KnowBe4<\/a> says that while voice attacks (vishing) \u201cremains at relatively low levels versus other payloads, with the rise of deepfakes it\u2019s emerging as part of hyper-targeted kill chains that make the risk both personal and technical.\u201d<\/p>\n And this has been proven in the real world, with vishing “reported as a successful tactic in the kill chain for the Scattered Spider criminal gang and their affiliates during their onslaught of attacks on retail and manufacturing giants worldwide.\u201d<\/p>\n That\u2019s the real message, this use of multiple parallel channels to execute an attack \u2014 a concerning shift to these so-called \u201cmulti-step kill chains\u201d is set to accelerate in 2026. <\/p>\n