FBI Alerts Gmail Users to AI-Powered Phishing Scam

The FBI has issued a warning about a new sophisticated phishing campaign targeting Gmail users, utilizing artificial intelligence to create highly convincing impersonations. This campaign is part of a broader increase in AI-driven phishing attacks, with reports indicating that 96 percent of organizations have been affected in 2024. Attackers initiate contact through spoofed phone calls claiming to be from Google, followed by fraudulent emails instructing users to provide their Gmail recovery codes, which actually grants access to their accounts. The threats have escalated to the point where victims risk severe financial losses and identity theft. Cybersecurity experts emphasize the importance of vigilance, urging users to avoid sharing sensitive information over the phone and to utilize advanced security measures like Google's passkeys. Additionally, a new phishing kit named Astaroth has been identified, capable of bypassing two-factor authentication by capturing credentials in real-time, further complicating the cybersecurity landscape.