Obnews Tech Desk: If there is an email from No-Reply@google.com in your inbox that has written that “your account has been found to be suspicious activity” and you have to verify it by clicking on a link-then be alert. This is a new fishing scam that is trying to mislead users and hack their account.

In this fake email, Google logo, professional tone and branding have been used so that it looks real. It was first reported by user Nick Johnson on X (East Twitter). He said that this email passes DKIM signature, which makes it technically real and Gmail also considers it a secure.

Fear and confusion game

It is written in this email that if you do not click on the “Review Activity” button within 24 hours, then your gmail account will be closed. This fear and haste forces users to click on the link – and people get stuck here.

How to steal the complete information about the account?

Once the user click on the link, it shares his username, password, recovery email, mobile number and even 2FA code, then scammers completely control the account. They can send more fishing emails from that account.

“This scam was possible due to two security flaws in Google's system, whose improvement was ignored at the beginning,” – Nick Johnson

What to do to avoid such scams?

• Never click on the link given in the email – open the gmail directly and check the security of your account.
• Use the Report Phishing option – It is available in the three dot menu in Gmail.
• Do turn on 2-factor authentication (2fa)-it doubles the security of your account.
• See the email of the sender carefully – whether the name is real, the email ID is often fake.
• Do not enter the password on the unknown website – especially when the website URL looks suspicious.

Click here to read other technology news

Google's advice:

Grammatical errors in the email, such as scared language or demand for immediate action – then understand, the matter is something wrong.