 Friday, May 23, 2025 in Security  No Comments |  | 
Gmail users have been warned about a highly convincing scam email thatappears to come from Google themselves.
The email seems to come from no-reply@accounts.google.com, which is the address that real security updates come from.
It links to a webpage hosted by Google, too, which is another convincing sign.
But the website was not made by them; it was made by scammers trying to trick you.
The email claims that ‘a subpoena was served on Google LLC requiring us to produce a copy of your Google Account content’.
It links to a sites.google.com domain designed to look like Google’s genuine support page.
However, the real support webpage is on accounts.google.com, while the ‘sites’ domain is one that anyone can build a free webpage on.
Ordinary users are unlikely to know or notice this, however, and could inadvertently grant scammers permissions that could allow them access, or target you with malware.
someone else get their hands on your gmail account (Picture: Getty)
Gmail users have been warned about a highly convincing scam email thatappears to come from Google themselves.
The email seems to come from no-reply@accounts.google.com, which is the address that real security updates come from.
It links to a webpage hosted by Google, too, which is another convincing sign.
But the website was not made by them; it was made by scammers trying to trick you.
The email claims that ‘a subpoena was served on Google LLC requiring us to produce a copy of your Google Account content’.
It links to a sites.google.com domain designed to look like Google’s genuine support page.
However, the real support webpage is on accounts.google.com, while the ‘sites’ domain is one that anyone can build a free webpage on.
Ordinary users are unlikely to know or notice this, however, and could inadvertently grant scammers permissions that could allow them access, or target you with malware.
Security software firm Kaspersky said that there are other clues, too.
If you look closer at the email details, the to and mailed-by fields contain a jumble of letters of emails which have nothing to do with Google, showing me[@]googl-mail-smtp-out-198-142-125-38-prod[.]net and
fwd-04-1.fwd.privateemail[.]com.
The scam was first revealed by tech developer Nick Johnson.
metro.co.uk | |
|
