Careful, really intelligent Gmail phishing attempt

[mynameisfrankenstein]

"The closest I've ever come to falling for a Gmail phishing attack" https://twitter.com/tomscott/status/812265182646927361

Another person made a blog post dissecting it, after they became a victim of it.
http://blog.greggman.com/blog/getting-phished/

 

[Lunaaa]

I just check who the email is from

 

[mynameisfrankenstein]

I just check who the email is from

In the twitter posters case, it came from a friend's compromised account.

 

[void957]

Not that intelligent to be honest. I'd always check whos sending it and check the address bar for https:website.com before i'd do anything. Also, unless you were expecting an invoice in a pdf, i dont see why anyone would download it, log back into their gmail just to see it. Also another reason to have 2FA. You'd have to go to your Google drive to see the pdf or your desktop, not login back to Gmail. This phishing attempt makes no sense.

 

[iModBot]

This is why you use 2 step verification.

https://www.google.com/landing/2step/

 

[mynameisfrankenstein]

Not that intelligent to be honest. I'd always check whos sending it and check the address bar for https:website.com before i'd do anything. Also, unless you were expecting an invoice in a pdf, i dont see why anyone would download it, log back into their gmail just to see it. Also another reason to have 2FA. You'd have to go to your Google drive to see the pdf or your desktop, not login back to Gmail. This phishing attempt makes no sense.

RE: The attachment, the attackers scour the victims account for a previous attachment they've sent. They screenshot it then start sending it to everyone of the victims contacts. It's pretty in-depth.

 

[mnunes532]

Spammers always trying to find new ways for phishing. You may think that no one falls for this... think again.