The US Federal Bureau of Investigation (FBI) has alerted that Gmail users have become targets of an advanced phishing campaigns that use Artificial Intelligence (AI) to create highly-convincing scams.
These sophisticated tactics, FBI warns, can result in significant financial losses, reputational damage, and compromise of sensitive data.
In May 2024, the FBI issued a warning about the increasing use of AI by cybercriminals to craft convincing voice or video messages and emails, enabling fraud schemes against individuals and businesses alike.
One of the most notable campaigns targeting Gmail users involves a combination of AI-generated calls and emails. The scam typically begins with a call claiming that the user’s Gmail account has been compromised, followed by emails from seemingly authentic Google domains to add credibility to the claim.
Scam targeting Gmail combines AI-generated calls and emails
The low cost of AI tools, starting at just $5 for advanced email attacks, makes them accessible to a wide range of malicious actors.
One of the most notable campaigns targeting Gmail users involves a combination of AI-generated calls and emails. The scam typically begins with a call claiming that the user’s Gmail account has been compromised, followed by emails from seemingly authentic Google domains to add credibility to the claim.
The goal is to trick users into providing their Gmail recovery code, which, once obtained, grants the attackers access not only to the Gmail account but also to other linked services, potentially leading to identity theft, according to FBI.
The effectiveness of these AI-driven phishing campaigns lies in their ability to bypass security filters and create highly personalised and convincing messages.
AI algorithms can analyse vast amounts of data on targets, allowing for tailored attacks that reference personal details, recent purchases, or interests. Â
This level of personalisation significantly increases the likelihood of success, as recipients are more likely to trust emails that appear to be from familiar sources or reference personal information.
With over 2.5 billion Gmail users worldwide, these campaigns pose a significant threat to personal and financial security. The use of AI in phishing attacks has made it increasingly difficult for users to distinguish between legitimate communications and scams.
Even experienced users have fallen victim to these sophisticated tactics, highlighting the need for heightened vigilance and robust security measures.
The FBI and cybersecurity experts emphasise the importance of caution when receiving unsolicited emails or text messages. Users are advised to never click on links or download files from unexpected messages, avoid entering personal information on unverified websites, and use multi-factor authentication (MFA) for all accounts.
Additionally, monitoring accounts for unauthorised access and using up-to-date security software are crucial in protecting against these threats.
While AI is being exploited by cybercriminals, it is also being harnessed by tech companies to enhance security. For instance, Gmail has developed AI models that significantly strengthen its defences against spam and phishing, blocking over 99.9% of such threats.Â
These advancements highlight the ongoing cat-and-mouse game between cyber attackers and defenders, with AI playing a pivotal role on both sides.
Home
