Nearly 3 billion Gmail users around the world are now facing a serious cybersecurity threat. According to security experts, a new type of phishing attack powered by Artificial Intelligence (AI) has put a massive number of Gmail accounts at risk.
Google recently confirmed that a group of hackers is impersonating Google support agents to collect recovery codes from users. Using these codes, they are gaining full access to the targeted Gmail accounts. Experts refer to this tactic as an “AI-powered social engineering attack.”
How the attack works:
The hackers initiate contact through fake phone calls or emails, claiming the user’s Gmail account has been compromised. They ask the user to share a recovery code that has been sent to their phone, under the guise of securing the account. Once they receive the code, they can take control of the account almost instantly.
Why this is especially dangerous:
Cybersecurity professionals warn that these AI-driven phishing attacks are much more convincing than traditional scams. The use of advanced language models and realistic communication techniques makes it extremely difficult for the average user to detect the fraud.
How to stay safe:
Google and cybersecurity agencies have advised the following precautions:
-
Enable Two-Factor Authentication (2FA)
-
Avoid interacting with suspicious numbers or emails
-
Remember: Google never asks for your recovery code
-
Change your password regularly
-
Keep your devices and software updated
In light of this growing threat, user awareness is more important than ever. Combating this new wave of AI-driven scams requires a combination of technology and vigilance.