![\"Gmail](\"https:\/\/specials-images.forbesimg.com\/imageserve\/672917de30558ca355afff3b\/Gmail-app\/960x0.jpg?cropX1=228&cropX2=1220&cropY1=488&cropY2=1059\")
<\/p>\n<\/p>\n
If you see this, your Gmail account issues under attack.<\/p>\n
NurPhoto via Getty Images<\/p>\n
Republished on August 31 with new advice following Gmail attack warnings.<\/p>\n
Google is clearly frustrated by countless headline warnings<\/a> of \u201c2.5 billion Gmail accounts exposed as massive hack uncovered.\u201d This is not the case and Google Cloud and Gmail data was not affected<\/a> in the recent breach, Google tells me.<\/p>\n But Gmail is under attack nonetheless. The company has also confirmed<\/a> that such threats are surging as hackers successfully gain access<\/a> to user accounts. And that brings us to another Google frustration \u2014 and one that\u2019s much more persistent that this month\u2019s furor after its Salesforce breach.<\/p>\n \u201cPlease reiterate to your readers that Google will not call you to reset your password or troubleshoot account issues,\u201d the company asked me. And yet calls from its customer support number continue to trick users into opening their accounts to hackers.<\/p>\n ForbesThe 20 Worst Passwords In America\u2014Change Yours If It\u2019s HereBy Zak Doffman<\/a><\/p>\n \u201cA person claiming to be a Google employee will contact you by phone (typically using a phone number with a 650 area code),\u201d Proton<\/a> warns, \u201cand inform you that suspicious access attempts were detected on your Gmail account.\u201d<\/p>\n If you take the bait, \u201cthe person attempts to get you to reset your password under the guise of keeping your account secure.\u201d But be warned, \u201conce this is done, the scammer can lock you out of your Gmail account,\u201d which leads to a world of pain.<\/p>\n The number you need to watch for is +1 (650) 253-0000, which a quick Google search tells you is linked to \u201cthe global headquarters of Google.\u201d It has been spoofed.<\/p>\n A typical Reddit<\/a> post reports that a \u201cguy with a very Californian accent\u201d called from this number to warn of unauthorized account access and to talk the user through steps \u201cto secure my account and prevent further recovery attempts from outside of the U.S.\u201d<\/p>\n These Gmail attacks \u201cbegin with unauthorized account recovery attempts originating from international locations,\u201d per Cyber Press<\/a>. \u201cThese initial attempts serve as reconnaissance, testing account security measures and potentially creating a sense of urgency for the target. Days later, victims receive phone calls from what appears to be Google\u2019s legitimate customer service number: +1 (650) 253-0000.\u201d<\/p>\n ForbesAmazon Confirms 320 Million Users Now Have Upgraded AccountsBy Zak Doffman<\/a><\/p>\n If you do receive a call from that number, it\u2019s an attack. Log into your Google account using the usual, publicly available method \u2014 never a link. Go to Security\u2014Review Security Activity and see what\u2019s listed. If there are no unfamiliar logins, you can relax.<\/p>\n While there, you can run a Security Checkup and follow any recommended steps. You should certainly replace SMS 2FA with an authenticator app and add a passkey. It\u2019s also worth changing your password to something strong and unique.<\/p>\n Meanwhile, those Gmail password headlines continue to fill newsfeeds, despite Google\u2019s clarification as to the extent and limits of exposure from its Salesforce breach.<\/p>\n Venn\u2019s David Matalon told me \u201cGoogle\u2019s warning is an important reminder that compromised passwords remain a major threat,\u201d which is clearly the case.<\/p>\n Shane Barney from Keeper Security says this is because \u201ccompromised credentials continue to be the top entry point for attackers, and Google\u2019s disclosure is a reminder that even the best platforms can\u2019t protect accounts if passwords are weak, outdated or stolen. Whether through phishing, credential stuffing or social engineering, hackers know it\u2019s far easier to go after logins than to break encryption.\u201d<\/p>\n ForbesApple Warns All iPhone Users\u2014Do Not Reply To These MessagesBy Zak Doffman<\/a><\/p>\n