Gmail Users Beware: AI-Driven Phishing Scam Targets 1.8 Billion Account

A new wave of phishing scams is targeting Gmail users worldwide, exploiting advanced artificial intelligence to bypass Google’s security measures. The scam involves highly convincing emails and phone calls that mimic legitimate Google communications, often citing urgent legal concerns like subpoenas to create a sense of urgency. These emails are sent from legitimate domains and are properly signed, making them difficult to detect as fraudulent.

Victims are directed to fake Google websites that closely resemble the real ones, tricking them into revealing sensitive information. The scam was first flagged by developer Nick Johnson, who noted that the fraudulent emails passed Google’s DKIM signature checks and appeared in the same conversation thread as genuine security alerts.

Google has acknowledged the issue and is rolling out protections to shut down this avenue for abuse. In the meantime, users are advised to adopt two-factor authentication and passkeys for enhanced security. This incident underscores the growing sophistication of cybercriminals and the importance of staying vigilant against phishing attempts.