WARNING AGAINST NEW PHISHING ATTACK ON GMAIL AND YOUTUBE USERS
The Cyber Security Authority of Ghana in a recent post warns the general public against a new phishing attack on Gmail and YouTube Users.
In the communique, Google has issued an alert to users of Gmail and YouTube against an emerging phishing attack that poses a threat to users of these online services. Hackers use this attack vector to harvest the personal and/or sensitive data of unsuspecting individuals to perpetuate other malicious activities.
HOW IT OPERATES
Gmail Account Phishing Attack:
Attackers are impersonating Google's brand to send fake emails or pop-ups beginning with the subject line "Online Reward Program". Users who open this email or pop-up are presented with a message "Congratulations! You are a lucky Google user! "Every 10 millionth search is reached worldwide; we will proclaim a lucky user to send out a thank-you gift. You are the lucky user!". The message then requires users to click on a specific link to redeem their prize by entering their personal information, which is then harvested.
YouTube Phishing Attack:
Attackers are impersonating YouTube channels to send fraudulent emails to unsuspecting users. The emails are sent from no-reply@youtube.com using subject lines such as "YouTube policy change" and "The YouTube team sent you a video." The email contains a link to the video or an attachment that leads to a fake login page where personal information is harvested or may contain malware.
RECOMMENDATIONS
These are recommendations from the alert.
1. Google does NOT offer spontaneous prizes in the format described above. Do NOT reply with your personal information.
2. Do NOT reply to or click on any link or attachment from an unsolicited sender. Verify any reward programmes via mainstream media outlets such as newspapers and websites before assuming they are true.
3. Be cautious of messages that create a sense of urgency or fear, prompting you to take immediate action or risk losing access to your account or any other offer.
The CSA has a 24-hour Cybersecurity/Cybercrime Incident Reporting Points of Contact (POC) for reporting cybercrimes and seeking guidance and assistance on online activities. Call or Text - 292, WhatsApp - 0501603111 or Email - report@csa.gov.gh
Comments
Post a Comment