Google warns against new phishing attack on Gmail and YouTube Users

Google has warned users of Gmail and YouTube of emerging phishing attacks posing a threat to users of these online platforms.

Hackers are exploiting these services to harvest users' personal and sensitive data for malicious activities.

According to Google, attackers are impersonating the company to send fake emails or website links beginning with the subject line "Online Reward Program".

"Users who click this link are presented with a message 'Congratulations! You are the lucky Google user! 'Every 10 millionth search is reached worldwide; we will proclaim a lucky user to send out a thank-you gift. You are the lucky user!'" Google said in a statement.

"The message then requires users to enter their information to claim their 'prize' which is used for identity theft and scams,” Google noted in a press statement issued by the Cybersecurity Authority (CSA), Ghana on Monday, May 8.

In a separate attack, hackers are impersonating YouTube channels to send fraudulent emails to users with subject lines such as "YouTube policy change" and "The YouTube team sent you a video".

The email contains a link to a "video" or attachment leading to a fake login page to steal information or install malware.

"Google does NOT offer spontaneous prizes or policy changes in these formats. Do NOT provide personal information in response to unsolicited messages," Google warns.

It added, "Verify any programmes from trusted media sources before assuming legitimacy. Messages creating urgency to take immediate action or risk account loss are also fraudulent.”

The CSA has also reiterated that it operates a 24-hour helpline (292/0501603111) and email ([email protected]) for the public to report cybercrimes for guidance.

"Phishing attacks target people, so user awareness and vigilance are critical to prevention. We urge all users to ignore unsolicited messages and links for their security," the CSA’s statement emphasised.