Archive

Google

Sunday, February 3, 2008

Gmail phishing email

First phishing email I receive about the Gmail account and it's quite interesting how the sender managed to trick the Gmail spam filters and also make it look very official:

Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have acces and use of your Google account and to ensure a safe Gmail experience. We require all flagged accounts to verify their information on file with us.
This is the right link for edit account page
After you verify your information, your account shall be returned to good standing and you will continue to have full use of your account. Please note that if you don't verify your ownership of account in 2 x 24 hours we will block/ susspend your Google account.
Thanks,
The Gmail Team


If it wouldn't have been for that "susspend" typo and the fact that the "edit account" link was a "uk-google.com/account" fake page, this might have been the perfect phishing email. Of course that "edit account" link now shows a parked domain so this means it was brought down very fast (but still some people might have falled for it). Anyway, below is the screenshot of the email, ironically how the ads on the right hand all are related to "scams", maybe the ad delivery filter is more powerful than the spam filter gmail uses.


Never ever click a link inside such an email regarding your account for the XYZ bank or your ebay/paypal/amazon account, instead go and type the official url you already know in your address bar and login on the official page to see if you're informed about any changes/problems with your account. This is safer.

0 Comments: