“Unmasking the Gmail AI Scam: Could You Be One of the 1.8 Billion Targets?”

In an era where a single misguided click can unravel our digital lives, the rise of artificial intelligence scams has become alarmingly prevalent. Picture this: nearly two billion Gmail users, all targets of a sophisticated and devastating scam leveraging AI technology to orchestrate eerily realistic phone calls and phishing emails. It’s terrifying to think that someone could swipe your identity and drain your bank account faster than you can say “cybersecurity”—and yet, here we are! The heart of the matter is not just the sheer scale of this fraudulent activity but the emotional wreckage it leaves behind, leaving victims in shock and wondering, “How did I fall for that?” As we navigate this treacherous digital landscape, it’s crucial to stay vigilant and informed. So, what can we do to protect ourselves from becoming the next victim? Let’s dig deeper into this alarming trend and arm ourselves with the knowledge needed to outsmart these lurking cybercriminals. LEARN MORE

An artificial intelligence scam targeting almost two billion people using Google’s Gmail function has been labelled as having ‘devastating’ impacts on its victims.

Keeping our data safe from those looking to steal it is an increasingly difficult thing to do in a world where you’re only one wrong click away from opening up your device and passwords to someone willing to rinse you dry.

Whether identity theft or something as simple but brutal as emptying your bank account, victims are left mortified when they release they’ve become victims to something they never thought would target them.

And now, 1.8 billion Gmail users have been put on alert by cybercriminals using AI to fake extremely realistic phone calls.

They’re also sending out that appear to be legitimate emails that are not at all what they seem.

The scam sees innocent bystanders targeted with the AI call before being told they’re being sent an email with a link in which they are asked to click through to a website that looks incredibly similar to Google. It’s not legitimate, though.

Pressing that link the scammers send you will grant them access to potentially steal your identity, information, and money.

Gmail users are being targeted (Mateusz Slodkowski/SOPA Images/LightRocket via Getty Images)

Spencer Starkey, a vice-president at SonicWall, warned: “Cybercriminals are constantly developing new tactics, techniques, and procedures to exploit vulnerabilities and bypass security controls, and companies must be able to quickly adapt and respond to these threats.

“This requires a proactive and flexible approach to cybersecurity, which includes regular security assessments, threat intelligence, vulnerability management, and incident response planning.”

In a post about the subject this week, malware intelligence researcher Pieter Arntz addressed the issue over on anti-malware software website, Malwarebytes.

Arntz wrote: “This warning should not be taken lightly. This is especially because the AI tools that cybercriminals have at their disposal are relatively low cost. In one study, researchers found that the cost of advanced and sophisticated email attacks starts at just $5 (£4).”

Never click on a link from an unknown source (Jakub Porzycki/NurPhoto via Getty Images)

It references a 2024 warning from the FBI on the issue.

FBI Special Agent in Charge, Robert Tripp, said at the time: “Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.

“These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”

The FBI warned about unsolicited emails and text messages, saying AI was at the heart of these phishing attacks.

Use multi-factor authentication on your Google accounts (Chesnot/Getty Images)

On avoiding becoming a victim of the AI Gmail phishing scam, Malwarebytes recommends you never click on links or download files from unexpected emails or messages.

Importantly, you should also only use a password manager to autofill credentials on trusted sites and use multi-factor authentication (MFA) for every account you have.

“Verify security alerts by visiting your Google Account page directly instead of using links in emails,” it adds.