Gmail phishing: Latest Cyber Attack

Email phishing isn’t going to be dead anytime soon. Scammer, cyber attackers and hackers are getting smarter with each passing day and they are evolving new ways of convincing people that their mails are true. A new kind of sophisticated phishing technique has been in vogue wherein hackers compose highly convincing emails for the target users. In this technique past messages and attachments of the target users are analyzed before composing such mails which breathes of originality and normality and urges users to click to divulge their critical information.

The Gmail-phishing trend

This particular trend of phishing has been uncovered by Mark Mauder, the CEO of WordPress’s security plugin is called Wordfence. In this particular kind of evolved phishing attack hacker first sends across an email which appears to the user as a normal mail containing a PDF which possess a similar file name as seen earlier by the user.

Another gruesome thing about this PDF is that it carefully contains a disguised image which when clicked by the users launches a new tab will appears just like official Gmail log-in page. In is extremely tough for a normal users to find the minute details which reveals it isn’t the real Gmail sign in page. This can only be found by closing looking at the address bar revealing a script running right there.

So real, so convincing

As stated earlier it is extremely difficult for anyone to find flaws in the webpage design which results in targeted user entering their log-in details without any second thought. Once a user has entered the details then it can be used by the hackers to gain access to account for stealing the data or simply forward one mail to other recipients from the very same mail. In one such incident hackers has successfully hoodwinked an athlete believing their mail and link to be the true Gmail sign-up page.

Thereby they used his accounts log-in details to similar mails to other athletes in the team and within a short whole team’s emails and data were compromised. Hackers don’t waste much time after getting the log-in details. They use target users email account to send out multiple mails with user’s actual subject lines to other people in the contact list.

How to protect yourself from such phishing attack

There are some smart ways to outwit the hackers and stay safe from such attacks. One should always check upon the address of opening links when clicked on any kind of email. In this case the legitimate Gmail page has ‘https://’ address while the phishing attacks links possess ‘data:text/html.https://’. This clearly shows the given link brings the fake url of the Gmail’s sign-up page and it is also too long in nature. The best way to secure your Gmail account is to enable the two form authorization on Gmail wherein users has to insert not just their id and password but they also have to enter a passcode sent to their mobile device to enter their email account.

Gmail Will now Warn You if You’re Being Targeted by the Government

Gmail Security Warning

Apple is not the only company that has been combating against government backed cyber-attacks. While Apple and the FBI dispute over the security of the user, Google has been bringing security in focus in a different way, by telling you what is going on. The company would be increasing the perceptibility of Gmail security warning in an attempt to help people in protecting themselves while sending and receiving emails.

One of the changes seems to be the expansion of the `safe browsing’ notifications that tells the user when they are about to open a suspicious link from an email. The warnings could appear when a link has been clicked but before the link really opens, it presents the user with a last option to withdraw instead of visiting the page. Earlier a warning was only shown before a link was clicked though no block seemed to appear if the user had not seen the warning or clicked it.

Google expects that this new additional warning would be helpful in stopping users from visiting malicious sites. Google also tends to continue the fight against state-sponsored attacks, portraying a full page warning when one is being targeted by a government-backed hacker.

Gmail Accounts Targeted by Government-backed Attackers

In a blog post, Google had mentioned that less than 0.1% of Gmail users would be receiving this kind of warning, but it highlights the importance of the warnings due to the fact that those often receiving them seem to be journalist, policy-makers and activists.

 The new warning of the state-sponsored attacks could be portrayed in addition to or instead of current warnings which Google tends to have in place for state-sponsored attacks. Google has been complaining of Gmail security a bit recently and last month had made an announcement that it would be warning users who seem to send email to recipients who were not utilising TLS encryption.

As per Google, after adding this message, the number of emails that were sent over encrypted connections had increased by around 25%. In an update in the manner that Gmail intends to be more secure, Google revealed that around 1 million Gmail accounts could have been targeted by government-backed attackers so far.

Striving to Improve Safe Browsing/Enhance Email Encryption

Google did not disclosethe precise number and did not provide any explanation on how it knows when these hacks tend to take place. When a hack is identified, a pink Warning tab tends to appear on top of Gmail prompting affected users to protect themselves.

 The company also made an announcement recently that besides the bar, users would also get the full page warning with instructions on how to stay safe. This is what will be seen if a government is trying to hack into a Gmail account. Google, in its security update, mentioned that is striving to improve its Safe Browsing warnings which appear in Gmail each time a user clicks on what is believed to be a shady link which could lead to malware or phishing attacks.

Google intends to further enhance email encryption and the company has partnered with Comcast, Microsoft and Yahoo in submitting a draft IETF specification for `SMTP Strict Transport Security’, and Google together with its partners desire to ensure that encrypted email remains encrypted all along the complete path from sender to recipient.

Gmail be Replaced By Inbox Smart Email Tool As Main Google Email System

Gmail Rolled out New Tabbed Interface for Inbox on Mobile/Desktop

Gmail has rolled out a new tabbed interface for inbox on mobile as well as desktop. On first glance it seems good for email organization but on further inspection, these latest tabs seem to be confusing. According to the official Gmail blog, one can select which categories can be enabled as tabs that will show you how many new emails one may have for each category offering another option in organizing the inbox.

One can drag and drop messages between tabs and set certain senders to appear always on certain tabs. This feature is rolling on the desktop gradually and will soon be coming to Android as well as iOS apps shortly.

The tabs will slide in from the side in the case of mobile. Google has added the unsubscribed button to Android version of Gmail also and the feature that had been offered on the web enables users to get rid of newsletter together with other subscriptions which the users do not read or could have never intentionally signed up. Both the options are available in the same dropdown menu which is utilised in the selection of `Reply’ or `Forward’ options. Updates of the web are available already and the Android ones would be available very soon.

Beginning of the End for Gmail

Users have been encouraged to utilise its `Inbox by Gmail’ service by the company, in the intention which some have stated could be the `beginning of the end’, for Gmail. Inbox had been introduced last year, though Google had been focusing its interest on the app, analysing emails to group one which could be interesting together with other features that smartly organises emails. Google has described it as `the inbox which works for you’. Users of the app on their phone are now being redirected to Inbox instead of the normal Gmail.

When a user tends to click through on Gmail, they are greeted by a pop-up informing them that they may want to use Inbox instead. When the user logs in, a message pops up stating `Thanks for trying Inbox. To make it easier, we have updated Gmail to redirect you here’. The tool also provides the choice of heading back to the normal Gmail screen with a large button stating `turn it off’. Moreover it also enables user to turn it off at any point of time in the future through its settings.

Gmail Alive & Well

However, some users have recommended that the change could signal the beginning of the end for Gmail in its present form and the inbox could eventually be the default way of reading emails. Google has stated that Gmail was very much alive and it was simply making it easy to get Inbox as a default. A spokesperson had commented that `Gmail is alive and well and that they want to provide a seamless way for Inbox users to reach the Inbox site from Gmail.com without memorizing a new URL.

The possible redirect makes it easy to access Inbox often, according to the user and it could be turned off with a single click under `settings’. Inbox has been considered to complement the old Gmail view, enabling users to keep their old Gmail address. However the old way of organizing email, like long list of subject lines and senders, ordered by date, seems to be mostly unaltered since Gmail had first introduced it around eleven years back.

Gmail to Warn When Messages Take Unencrypted Routes

Security of User’s Data Vulnerable

Google has observed that the security of its user’s data has become more vulnerable when they received message sent through a different email provider. There is a possibility that most of the users would now begin to see the alerts coming, in a few months.

Google has plans of ramping up security at its free email service by enabling users to be aware when messages arrive through unencrypted connection which could be susceptible to snooping or tampering. These threats have urged Gmail to work on warning system which could alert users when they tend to receive unencrypted mail.

Elie Bursztein and Nicolas Lidzborski of Gmail security team had mentioned in a blog post this week that these warning would begin to roll out in the coming months and while these threats does not seem to affect Gmail to Gmail communication, they could affect messaging between providers.

This statement came with the result of the study indicating that email encryption has been increasing together with measures to prevent spam and fraud by improved authenticating messages. The good news is that more email providers have been offered email encryption along the board with the majority of them utilising a few type of authentication in order to decrease phishing.

Google/Yahoo/Others – Improve Encryption of Websites/Email

But Google has said that it discovered regions of the Internet wherein email encryption had been secretly thwarted as well as exposed malicious servers that were programmed to hijack Gmail message by providing them false routing information.

Bursztein and Lidzborski had indicated in the post that though this kind of attack seems rare, it was a matter of concern as it would enable attackers to censor or alter messages before they are relayed to the email recipient.

In an attempt to enhance privacy in the midst of concerns with regards to hacking and surveillance, Google, Yahoo together with other online firms has been moving to improve encryption of websites and email. Bloggers have confirmed that, to notify users of possible dangers, they have been developing in-product warnings for Gmail users which would display whenever they receive a message through a non-encrypted connection. The good news is that more email providers are providing email encryption on the board and most of them are using some types of authentication to lessen impersonation and phishing.

Most Providers do not Support STARTTLS

Though Gmail-to-Gmail messages are always encrypted, the company has revealed that around 57% of email that are sent from providers to Gmail is encrypted while 81% of outgoing Gmail to the other provider also. This would be great since unencrypted emails are good targets for the criminals.

Moreover the groups also found malicious DNS servers broadcasting false routing information to email servers on the lookout for Gmail. However simultaneously, these researchers also discovered that there were certain areas of the internet which were preventing message encryption by tampering with requests to start SSL connection.

 Most of providers do not support STARTTLS, which means that any email encrypted by the sender cannot be read when it is received on the other end. The focus of Google in warning Gmail users with regards to unencrypted connection is to caution them to such type of dangers.

-o0o-