Gmail Users Targeted by AI Phishing Attacks and Increasing Cases of Digital Arrest Scam

Highlights

• Gmail scam – AI-generated phishing scams posing risks to Gmail users.
• Digital Arrest scam – fraudsters posing as government officials using intimidation and fear tactics to scam people.

According to multiple media reports, Gmail users are now facing a new threat in which AI is being used to drive phishing attacks. Hackers are now adopting machine learning technology to generate emails that look similar to authentic communications.

These emails are convincing and can put billions of Gmail users at risk. Here’s everything we know about the latest Gmail scams –

What Are AI-Generated Phishing Emails Harder to Detect?

Firstly, AI-generated phishing emails usually have a lot of personal information including the receiver’s name, address or sometimes even details from past interactions. All this works in making the email seem highly authentic.

The attackers usually create the emails in such a way that receivers click on malicious links or share sensitive information. This includes leaking login credentials or payment details as well.

What makes this attack even more dangerous is the addition of fake phone calls from Google Assistant.

The caller often claims the call is from Google. Moreover, you may also receive a follow-up email that will look and sound genuine.

Here are some warning signs to look out for in email –

• You receive a Google account recovery notification that you didn’t initiate.
• Google doesn’t contact users directly unless you have a Google Business Profile, so unsolicited calls are suspicious.
• The email you receive may have a “To” address that isn’t connected to a Google domain.
• Check your account for any unusual active sessions—there should be none apart from your own.
• Email headers might show how the email was spoofed, so it’s important to review them carefully.
• Reverse searching the number may reveal others who received similar scam calls.

How to Protect Yourself from AI-Powered Phishing Emails?

• Be wary of requests for personal information: Legitimate companies will never ask for sensitive information like passwords or credit card details via email.
• Verify the sender’s email address: Even small changes in the email address can indicate a phishing attempt.
• Check links before clicking: Hover over links to see where they lead. If it looks suspicious or unfamiliar, don’t click.
• Enable two-factor authentication (2FA): Adding this extra security step makes it harder for hackers to access your account, even if they have your password.
• Keep your software up to date: Regularly updating your antivirus, browser, and operating system helps protect against potential vulnerabilities.

You can save yourself from AI-powered phishing emails by staying alert and following the above-mentioned tips.

Moreover, always be cautious when receiving unexpected calls or emails, especially those asking for personal details.

CERT-In Advisory Android & Chrome

Meanwhile, in two recent advisories number CIVN-2024-0319 and CIVN-2024-0318, CERT-In highlighted multiple high-severity vulnerabilities in Google Chrome and Android operating systems.

These vulnerabilities expose millions of Android and Gmail users to cyberattacks enabling cybercriminals to execute arbitrary codes.

Online “Digital Arrest” Scam: How Scammers Are Duping People?

Recently, there has been a noticeable rise in a new scam known as the “Digital Arrest” scam.

This is where fraudsters pose as government officials to scare people into sharing financial or personal information and scam for money. Here are some recent incidents.

Scammers Pretending to Be Government Officials

A man in New Delhi recently fell victim to the digital arrest scam. He lost nearly Rs. 6 lakhs.

The scammers pretended to be from the Department of Telecommunications contacted him and falsely linked his phone number to illegal activities. They even transferred the call to another scammer posing as an official from Mumbai Crime Department.

#Digitalarrest में सरकारी अधिकारी बनकर कॉल करते है #scammer pic.twitter.com/78jB6eNPBf

— Cyber Swachhta Mission Chandigarh Police (@ChdCyberCell) October 13, 2024

#DigitalArrest : पुलिस अफ़सर बन कर कोई भी आपको लूट सकता है. डराने और धमकाने के तरीक़े अलग होते हैं #cyberfraud इस तरह के नोटिस भेज कर भी डराने की कोशिश करते हैं. केंद्रीय गृह मंत्रालय ने डिजिटल अरेस्ट को लेकर आज अख़बारों में विज्ञापन भी दिया है. किसी तरह की परेशानी के लिए 1930… pic.twitter.com/4IhjTiQXUV

— पंकज झा (@pankajjha_) October 5, 2024

In a similar case, a retired university professor was duped out of Rs. 75 lakhs. The scammers pretending officers from the Enforcement Directorate.

These scams are part of a larger trend where fraudsters use intimidation and fear to trick people into giving away their money.

How Do Digital Arrest Scammers Operate?

What makes this recently popular Digital Arrest scam so effective is how well-prepared the scammers are.

The scammers use rehearsed scripts and create convincing setups including showing fake police stations on video calls. All this makes the experience seem more real.

Scammers also use the publicly available information. This includes phone numbers and bank account details, which makes it convincing for people to believe they are from real authorities.

Protecting Yourself from the Digital Arrest Scam

The important thing is to stay informed about current fraud tactics if want to stay safe from these types of scams.

It is often advised to look out for official government statements that can clarify such situations.

The Department of Telecommunications (DoT) even issued a statement earlier this year warning people about scammers threatening to disconnect their mobile numbers or claim they are linked to criminal activities.

Tip to protect yourself –

• Avoid answering unknown calls especially those from foreign country codes.
• Hang up immediately and block the number if you hear a pre-recorded message about deactivating your phone number.
• Never share personal details like your email ID, alternative phone numbers, or birthdate.
• Never share financial information like account or credit card numbers over the phone with anyone even if they claim to be from the bank.
• By staying cautious and informed, you can avoid falling prey to these scams and keep your personal information safe.

FAQs

Q1. How are AI-generated phishing emails made more convincing?

Answer. AI-generated phishing emails often include personal information, making them seem highly authentic and convincing.

Q2. What makes the Digital Arrest scam effective?

Answer. The “Digital Arrest” scam uses well-prepared scripts, convincing setups, and publicly available information to seem more real and intimidate victims.

Q3. How can you protect yourself from AI-powered phishing emails?

Answer. Be wary of requests for personal information, verify email addresses, check links before clicking, enable two-factor authentication, and keep software updated.

Q4. What is one warning sign of an AI-generated phishing email?

Answer. One warning sign is receiving a Google account recovery notification that you didn’t initiate.

Q5. How can you protect yourself from the Digital Arrest scam?

Answer. Avoid answering unknown calls, hang up if you hear a pre-recorded message and never share personal or financial information over the phone.

Also Read :Google Rolls Out Contextual Smart Replies for Gmail on Android and iOS

Also Read : Gmail Adding Blue Verified Sender Checkmarks to Android and iOS Apps

Also Read : Gmail Adds AI-Powered Summaries with Gemini for Better Email Management