Sophisticated phishing scam targets Google accounts

[tasman]

The scam starts with an email allegedly sent by Google, with 'Mail Notice' or 'New Lockout Notice' as the subject

The messages reads: “This is a reminder that your email account will be locked out in 24 hours, due to not being able to increase your email storage quota.

Hackers are stealing Google account passwords using a new phishing attack that is hard to catch with traditional heuristic detection, warns security firm Bitdefender.

The attack exploits the uniform resource identifiers (URIs) that Google Chrome uses to display data. This makes Chrome users most vulnerable, but the attack also targets Mozilla Firefox users.

With access to users’ Google accounts, hackers can buy apps on Google Play, hijack Google+ accounts and access confidential Google Drive documents