Gmail, Yahoo, Outlook Users Face Urgent Phishing Threats

Gmail, Yahoo, and Microsoft users are facing a significant threat from a new phishing attack known as Astaroth, which bypasses two-factor authentication (2FA) through session hijacking and real-time credential interception. Cybercriminals send links that redirect users to fake login pages mimicking legitimate sites, enabling them to capture login details and 2FA codes swiftly. Meanwhile, a separate AI-driven scam has emerged, employing deepfake robocalls and emails to convince Gmail users to provide their account recovery codes, effectively granting hackers full access to their accounts. The FBI and cybersecurity experts warn that these sophisticated tactics can lead to devastating financial losses and identity theft. Users are advised to enable multi-factor authentication and never share their recovery codes, as Google will not ask for them via phone or email. Both scams illustrate the increasing sophistication of phishing techniques, necessitating heightened awareness and precaution among users.