A new Gmail warning from Google highlights a surge in attacks where hackers steal passwords and hijack accounts. Users are seeing more “suspicious sign-in prevented” messages, but Google cautions that cybercriminals are also mimicking these alerts to trick people into giving up their credentials. With billions of emails flowing daily, even small percentages slipping through filters can lead to serious breaches.
Gmail warns targets of look-alike emails
Attackers are copying Google’s own alerts to make their scams more convincing. Clicking on links inside these fake Gmail warning emails can redirect users to malicious sign-in pages. Once victims type in their username and password, hackers can seize control of their inbox and personal data. Google advises users to ignore links in warning emails and instead check their account directly through the official security panel.
A security vulnerability has been discovered in Microsoft's SharePoint servers, causing considerable concern for users.
Fake voicemail scam exploits Gmail users
Cybersecurity researchers have spotted a new phishing wave that abuses voicemail notifications. Victims receive an email claiming they missed a call, with a big “Listen to Voicemail” button. Behind the button is a fake login page that captures everything entered, including:
- Gmail email address and password
- SMS and voice call verification codes
- Google Authenticator tokens
- Backup recovery codes
- Linked recovery emails and answers to security questions
Because the attack exploits legitimate services like SendGrid and Microsoft Dynamics, it can slip past filters, while added captchas trick both users and automated defenses.
Gmail warning underscores stronger defenses
Google encourages users to enable passkeys and replace SMS-based two-factor authentication with more secure methods. Experts also stress avoiding reliance on a single Gmail address, since once it leaks into databases, it becomes a magnet for spam and phishing. Email aliasing tools from Proton, Firefox, or DuckDuckGo can generate disposable addresses that mask the real one, reducing exposure.
Why phishing campaigns keep getting sharper
Even with Google filtering billions of malicious emails, sheer volume means dangerous ones still land in inboxes. That’s why a Gmail warning should never be ignored. Account hijacks don’t just risk losing messages; they give hackers access to every connected service. Recovery is possible, but stolen content can’t be retrieved. One careless click can put years of personal data in someone else’s hands.
