Buzzapp Master 
Gmail users are being warned of a new, “extremely sophisticated” scam that could put you at risk of online fraud. Security experts at Malwarebytes have issued a warning that “all Gmail users are at risk” from the “clever” attack.
This is not a warning to be taken lightly as falling for this trick could give scammers full access to your accounts and personal data. The new attack, first spotted by Nick Johnson, a lead developer of the Ethereum Name Service, uses a cunning tactic to make it appear as if it’s been sent from a legitimate Google account. This means it not only looks official but can also bypass highly effective spam filters.
Johnson received an email from Google suggesting a legal subpoena had been issued and access to his account was needed. It may sound unbelievable, but the scam looked genuine because the email addresses and domain names appeared to be actual Google accounts, reports the Mirror.
The scam is described as sophisticated
(Image: krisanapong detraphiphat via Getty Images)
“The first thing to note is that this is a valid, signed email – it really was sent from [email protected]. It passes the DKIM signature check, and Gmail displays it without any warnings,” Johnson explained.
The only reason tech-savvy Johnson noticed something was amiss is that the official site should have been hosted on a platform called accounts.google.com – instead it appeared on sites.google.com. Cybercriminals have been exploiting Google’s platform, sites.google.com, to create fraudulent websites, but Google is on the case.
They’ve announced an upcoming update aimed at thwarting such attacks in the future. “We’re aware of this class of targeted attack from the threat actor, Rockfoils, and have been rolling out protections for the past week,” a spokesperson from Google shared with Newsweek.
Despite the tech giant’s efforts to bolster security, it’s important to remain vigilant online.
How to avoid Gmail scams Malwarebytes has stepped in with some advice to help email users dodge these new scams:
• Steer clear of clicking links in unexpected emails or unfamiliar websites
• Examine email headers closely when you receive a mail out of the blue
• Confirm the authenticity of surprise emails through another, separate method
• Avoid using your Google (or Facebook) account to sign in elsewhere – set up a unique account for each service instead
So, keep your wits about you when sifting through your inbox and don’t be duped by cons.
Story Saved
You can find this story in  My Bookmarks.Or by navigating to the user icon in the top right.
GIPHY App Key not set. Please check settings