Curated by THEOUTPOST
On Tue, 18 Feb, 4:02 PM UTC
2 Sources
[1]
Google's Gmail AI Attack Draws on Emotional Psychology - Why We Keep Falling for Scam Calls
AI-powered scams are on the rise and have lowered the barrier of entry for cybercriminals. Gmail users have been warned to remain vigilant against a new AI-powered scam that uses "super realistic" phone calls and emails to gain full access to accounts. The scam, experienced and reported by Microsoft solutions consultant Sam Mitrovic, has highlighted how AI-powered tactics are increasingly playing on victims' emotional psychology. AI-Powered Gmail Attack Mitrovic said the AI scam began with a notification to approve a new Gmail account recovery attempt, which was quickly followed by a "super realistic" phone call. The extremely convincing call also reportedly came from a number linked to official Google documentation online. "The scams are getting increasingly sophisticated, more convincing and are deployed at ever larger scale," Mitrovic wrote in a blog post. "People are busy, and this scam sounded and looked legitimate enough that I would give them an A for their effort. Many people are likely to fall for it," he added. Anti-malware firm Malwarebytes reported that victims of the Gmail scam could also lose access to many other services and even suffer "identity theft." "None of the elements used in the attacks are novel, but the combination might make the campaign extremely effective," the firm wrote. Drawing on Emotional Psychology AI scammers are becoming increasingly adept at turning victims' emotional responses into vulnerabilities. In the U.K., AI-powered voice cloning scams grew 30% in 2024, according to NatWest research. AI-generated scams often mimic urgent communications from trusted sources, like an unexpected warning from Gmail or a distressed family member. This urgency compels immediate action, which leaves little time for scrutiny and careful decision-making. Graeme Stewart, head of public sector at Check Point Software, told CCN that people are falling for AI-powered scams because "they are incredibly convincing." "AI enables scammers to use real-sounding voices and interactions that no longer feel artificial," Stewart said. "As a result, people are getting drawn into these conversations, as the responses feel increasingly lifelike -- almost indistinguishable from human communication." "When it comes to avoiding these scams, the best approach is to treat every unexpected call with suspicion," he added. Spencer Starkey, Executive VP of EMEA at cybersecurity provider SonicWall, said everyone is vulnerable to cyberattacks. "The sheer number of attacks the average customer can experience daily forces organizations of all sizes to automate detection solutions, to identify and halt any attack before it enters the system," he added. FBI Warns: AI Scams Increasing In May, the FBI warned that AI scams against individuals and businesses were escalating to a higher level of sophistication. AI significantly lowers the barriers to entry for cybercriminals through the automation of creation and distribution. Instead of manually crafting each message, scammers can generate thousands of highly personalized scam messages in a fraction of the time. FBI Special Agent in Charge Robert Tripp said: "As technology continues to evolve, so do cybercriminals' tactics. "Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike." "These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data."
[2]
This AI scam can wipe out your bank account -- just by hacking your Gmail
Deepfake robocalls + fake emails = the most dangerous Gmail scam yet... Gmail users worldwide, totaling 1.8 billion, have been put on high alert regarding a sophisticated scam that exploits AI technology to access their accounts. This fraudulent scheme combines deepfake robocalls and counterfeit emails to bypass user security measures. Victims receive a call claiming that suspicious activity has been detected in their Gmail account, followed by an email outlining steps to remedy the situation. The email contains a link to a fake website that mimics Google's, prompting users to enter their login information. Cybersecurity experts have indicated that the primary objective of this scam is to persuade targets to provide their Gmail recovery codes under the pretext that it is necessary to regain access to their accounts. These tactics not only threaten Gmail accounts but also any service linked to the platform. The FBI warned that such sophisticated scams could lead to significant financial losses, reputational harm, and the compromise of sensitive information. Malwarebytes reported that users should heed this warning, as the cost of advanced email attacks can be surprisingly low, starting at just $5, according to a study by McAfee's State of Scamiverse, which revealed that a convincing deepfake can be generated in under ten minutes. While previous warnings from the FBI emphasized the use of AI to create deceptive videos and emails, the latest findings by Malwarebytes reveal the integration of robocalls and emails in current schemes. Experts noted that while the components of these attacks are not new, their combination enhances the campaign's effectiveness. To help users avoid falling prey to these scams, Malwarebytes has provided guidance. Users are advised not to click on links or download attachments from unexpected emails, and to ensure that any websites they input personal information into are legitimate. The company also recommends utilizing password managers to fill in credentials only on trusted sites and to monitor accounts for unauthorized activity. FBI: Use a secret code to outsmart AI scams The FBI has recently issued advisories for iPhone and Android users regarding a surge in scams aimed at accessing personal and banking information. These scams have evolved to use caller ID spoofing to impersonate banks and law enforcement agencies, heightening their sophistication. Authorities in Long Island, New York, reported instances where individuals received calls from someone claiming to be a Suffolk County Police Department member, falsely stating that the residents had outstanding warrants and soliciting money. The FBI has urged anyone receiving such calls to refrain from offering personal information and to terminate the call immediately. If individuals suspect they have been targeted by a scam, they are instructed to contact the genuine organization the caller impersonated, using verified contact information. Experts emphasize that major tech companies like Google and Microsoft do not make unsolicited calls to users. Cybersecurity expert Dave Hatter cautioned users against engaging with unsolicited callers, asserting that they should regularly review their account activity through privacy settings to verify its accuracy. Users are strongly advised not to respond to requests for sensitive information over phone calls or emails and to treat urgent communications with skepticism.
Share
Share
Copy Link
A sophisticated AI-powered scam targeting Gmail users combines deepfake robocalls and fake emails to gain access to accounts, highlighting the growing threat of AI in cybercrime.
A new, highly sophisticated AI-powered scam targeting Gmail's 1.8 billion users worldwide has raised alarms in the cybersecurity community. This scam combines deepfake robocalls and counterfeit emails to bypass user security measures and gain full access to Gmail accounts 12.
The attack begins with a notification to approve a new Gmail account recovery attempt, quickly followed by a "super realistic" phone call. The call appears to come from a number linked to official Google documentation online, lending it an air of legitimacy 1. Victims then receive an email outlining steps to remedy the situation, which includes a link to a fake website mimicking Google's. Users are prompted to enter their login information and provide Gmail recovery codes under the guise of regaining account access 2.
AI significantly lowers the barriers to entry for cybercriminals through automation of creation and distribution. Instead of manually crafting each message, scammers can generate thousands of highly personalized scam messages in a fraction of the time 1. According to a study by McAfee's State of Scamiverse, a convincing deepfake can be generated in under ten minutes, with the cost of advanced email attacks starting at just $5 2.
AI scammers are becoming increasingly adept at exploiting victims' emotional responses. These scams often mimic urgent communications from trusted sources, compelling immediate action and leaving little time for scrutiny. Graeme Stewart, head of public sector at Check Point Software, noted that "AI enables scammers to use real-sounding voices and interactions that no longer feel artificial," making them almost indistinguishable from human communication 1.
The FBI has warned that AI scams against individuals and businesses are escalating to a higher level of sophistication. In the U.K., AI-powered voice cloning scams grew 30% in 2024, according to NatWest research 1. FBI Special Agent in Charge Robert Tripp stated, "As technology continues to evolve, so do cybercriminals' tactics. Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike" 1.
Cybersecurity experts recommend several measures to protect against these sophisticated attacks:
As AI continues to evolve, so too will the sophistication of cyber attacks. Staying informed and vigilant remains crucial in the ongoing battle against cybercrime.
A sophisticated AI-based scam targeting Gmail users combines spoofed phone numbers, fake emails, and AI-generated voices to trick victims into revealing their account credentials.
11 Sources
11 Sources
A sophisticated AI-powered phishing scam targeting Gmail users has been confirmed by Google, prompting warnings from the FBI. The scam involves convincing fake support calls and emails, highlighting the growing threat of AI in cybercrime.
3 Sources
3 Sources
AI-generated phishing emails are becoming increasingly sophisticated, targeting executives and individuals with hyper-personalized content. This new wave of cyber attacks poses significant challenges for email security systems and users alike.
9 Sources
9 Sources
As AI technology advances, scammers are using sophisticated tools to create more convincing frauds. Learn about the latest AI-enabled scams and how to safeguard yourself during the holidays.
7 Sources
7 Sources
The FBI has issued an alert about the increasing use of generative AI by criminals to enhance fraud schemes, urging the public to adopt new protective measures against these sophisticated threats.
4 Sources
4 Sources
The Outpost is a comprehensive collection of curated artificial intelligence software tools that cater to the needs of small business owners, bloggers, artists, musicians, entrepreneurs, marketers, writers, and researchers.
© 2025 TheOutpost.AI All rights reserved