IT Regulatory Compliance Security
Google Support Scam
| In this week’s scam, we bring attention to a recent incident that underscores the importance of vigilance against phishing scams. An individual was deceived into granting access to his Google account, leading to the theft of nearly $500,000 in cryptocurrencies. The scam involved a call from someone impersonating Google support, using a legitimate-looking phone number and email address. The victim received a prompt on his mobile device asking, “Is it you trying to recover your account?” By clicking “yes,” he inadvertently granted the attacker access to his Gmail account, which was synced to Google Photos containing sensitive information. You can read about the incident here: https://krebsonsecurity.com/2024/12/how-to-lose-a-fortune-with-just-one-bad-click/ To safeguard your personal and professional information, please adhere to the following guidelines: Be Skeptical of Unsolicited Communications: Legitimate companies rarely initiate unsolicited support calls or emails requesting personal information. Verify Identities Independently: If you receive a suspicious message or call, contact the company directly using official contact information from their website. Avoid Storing Sensitive Information in the Cloud: Refrain from storing critical data, such as security phrases or passwords, in cloud services without proper encryption. Use Strong Multi-Factor Authentication (MFA): Opt for the most secure MFA methods available, such as physical security keys, which are more resistant to phishing attacks. Stay Informed: Regularly educate yourself about common phishing tactics and remain cautious when handling unexpected communications. |