Beware: new sophisticated Gmail phishing attacks

Researchers have discovered a new phishing attack that is currently underway that is targeting Google Gmail accounts in a sophisticated way.

What's interesting about this specific attack is that it uses a new method, one that could even lure tech savvy users into its trap.

The attacks begin with compromised Gmail accounts. The attackers use the compromised account to send emails to email addresses in the compromised account's address book.

These emails come from a legitimate address therefore, and the attackers seem to use legitimate email messages for the attacks. They contain what looks like an attachment, a PDF or spreadsheet for instance, something that may have been sent in the past already.

When you click on the attachment, you are taken to a Gmail login page on a new tab in the browser.

http://www.ghacks.net/2017/01/19/beware-new-sophisticated-gmail-phishing-attacks/