Global Security Watch > Beware of Google Calendar phishing scam

[Untitled] The event invitation includes a notice that claims to be from “Gmail Customer Care”, and informs the recipient that due to some claimed difficulty, Google will close the recipient’s Gmail account unless they verify by sending their Google username, password and date of birth. It sounds suspicious, but since you are really on Google’s site, it’s possible that the red flags may not rise right away.

Previous [Previous] Identity Theft: Play Anti-Phishing Phil And Learn How To Sp...

Next [Next] Updated: Twitter Security Collapses; Obama, Fox and Britney .....

Some related posts from Technorati and Google.

[Untitled] Google Calendar-Based Phishing Exploit Now in the Wild | Maximum PC: The attack comes in the form of a simple calendar email notification telling you that your account will be deleted unless you submit your Google username, password and date of birth. Generally, the emails come from a “customerserviceXXXX@gmal.com” (where the X’s represent a random number) address, so be sure and keep your eyes out.

[Untitled] Graham Cluley's blog: THIS Email is from Gmail Customer Care and we are sending it to every Gmail Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of Gmail accounts so we are shutting down some Gmail accounts and your account was among those to be deleted.We are sending you this email so that you can verify and let us know if you still want to use this account.

[Untitled] Phishers Using Google Calendar Invites | WebProNews: "You haven’t been taken to a fake site posing as Google, but alarm bells should definitely be ringing in your head at this point."

[Untitled] Google Calendar Phishing returns - News - heise Security UK: When the link is clicked on, users are taken to a real Google Calendar event information page that contains numerous grammatical and phrasing errors in the description of the event. The page claims "we are having congestions due to the anonymous registration of Gmail accounts so we are shutting down some Gmail accounts" before asking for the user's Google credentials.

[Untitled] Google Calendar used by Phishers: These emails appear to come from Google’s own, ”˜Customer Verification’ department and are sent from the unlikely-sounding email address ‘customerserviceXXXX@gmail.com’ - with XXXX being a four-digit number.

[Untitled] Gmail 'vulnerability' turns out to be phishing scam | Security ...: The alleged vulnerability reportedly allowed an attacker to set up filters on users' e-mail accounts without their knowledge, according to a proof of concept posted Sunday at the blog Geek Condition. In the post, Geek Condition's "Brandon" wrote that the vulnerability had caused some people to lose their domain names registered through GoDaddy.com.

[Untitled] Google: No Gmail vulnerability, just phishing: Evans explains "Attackers sent customized e-mails encouraging web domain owners to visit fraudulent websites such as "google-hosts.com" that they set up purely to harvest usernames and passwords. These fake sites had no affiliation with Google, and the ones we've seen are now offline.

[Untitled] Google Calendar phishing campaign - again - Google Blogoscoped Forum: A scammer has created a Gmail account with the name “Customer Varifaction” says the report. James Xuan . 4 days ago #. Why can spammers nevar spel? Juha-Matti Laurio . 4 days ago #. Exatcly :). Full name: ...

[Blog Solute] Beware of Rapidshare Phishing | Fake Rapidshare site premium ...: Rapidshare Phishing, for those of you that don't know, is a fake Rapidshare web site. It is made to steal your account information and to steal your credit card (or any payment method) if you decide to sign up for a premium account.

[Geek Condition] Gmail Security Flaw Proof of Concept: [...] gelen iletileri kendi adreslerine gönderebiliyorlar.GeekCondition.com isimli sitede yer alan konsept kanıtına göre, Gmail hesabı altında bir filtre yaratmak isteyen kullanıcı, Google sunucularına bir istek [...]

[David Airey » graphic designer, logo designer] Google report GMail problem as phishing | David Airey » graphic ...: I can’t imagine you being suckered into giving out your login information like that. And it’s quite curious why it took Google so long to address the issue…

Reflected tags on Technorati: Blog, , , , , ,