Mother of all Google breaches puts all 2.5b Gmail users at risk
Briefly

Hackers linked to ShinyHunters breached a Google database managed via Salesforce by tricking an employee into sharing login credentials in June. The attackers stole business files with company names and customer contact details, though Google believes no passwords were taken. Scammers have used the stolen contact data to make fake phone calls and send malicious emails aiming to obtain Google account access and private data. Victims report fake calls from 650 area codes and vishing campaigns impersonating Google employees. Some attackers also test common passwords against exposed Gmail addresses. Users are urged to enable multi-factor authentication and update weak passwords.
Hackers have breached a major Google database, putting the accounts of 2.5 billion Gmail users at risk of being hijacked by scammers. The hacking group known as ShinyHunters broke into a Google database managed through Salesforce's cloud platform by tricking a Google employee into sharing login credentials in June. They stole troves of business files, containing company names and customer contact details, but Google does not believe any passwords were taken during the incident.
'There's a huge increase in the hacking group trying to gain leverage on this. There's a lot of vishing - people calling, pretending to be from Google, text messages coming through in order to get people to log in, or get codes to log in,' Knight explained. 'If you do get a text message or a voice message from Google, don't trust it's from Google. Nine times out of 10, it's likely not,' he warned.
Read at Mail Online
[
|
]