Urgent warning to all 1.8b Gmail users over new scam using security checks to steal accounts: Do NOT

[240B]

Urgent warning to all 1.8b Gmail users over new scam using security checks to steal accounts: Do NOT click

Daily Mail
By STACY LIBERATORE
16 March 2026

Cybersecurity experts have uncovered a new scam targeting Gmail users that disguises itself as a Google account security tool designed to protect email accounts.

Researchers at Malwarebytes Labs discovered a malicious website that closely mimics Google's official account security check and guides victims through a four-step process that appears legitimate.

Instead of protecting accounts, the fake tool quietly collects sensitive information that attackers can later use to break into Gmail and other Google services.

Hackers are attempting to direct victims to the fraudulent page through phishing emails, text messages and malicious pop-ups claiming a user's Google account requires immediate security verification.

Once on the site, victims are prompted to install what appears to be a security tool, which can give cybercriminals access to the device's contacts, real-time GPS location and clipboard data.

'When installed as a PWA (Progressive Web App), the browser address bar disappears,' Malwarebytes researchers explained in a blog post. 'The victim sees what looks and feels like a native Google app.'

Security analysts warn that the malicious tool can also intercept one-time verification codes used for two-factor authentication, which are often required to log into Gmail accounts.

In some cases, the attack may also install additional software capable of recording keystrokes, potentially capturing usernames, passwords and other sensitive information typed on the device.

(more)
https://www.dailymail.co.uk/sciencetech/article-15651367/gmail-scam-security-check-steal-accounts.html

[Fishrrman]

I try to avoid all things "google", including GMail.

I do use YouTube, however. There's yet no real equivalent to that.

[Idiot]

I try to avoid all things "google", including GMail.

I do use YouTube, however. There's yet no real equivalent to that.

Just great......   I got my suddenlink email account hacked that I had for 20 years.  They proceeded to get into my Walmart, Sams, Amazon, Lowes, Home Depot accounts among others.  They then hacked my credit cards and even sent me an email blackmail demanding to be paid $500 in bitcoin. It was quite the ordeal.  Naturally I moved my email to gmail...lolololol.