The BBC today reports that it has received confirmation from Google that Gmail was also targeted in what the search giant described as an "industry-wide phishing scam."
"We recently became aware of an industry-wide phishing scheme through which hackers gained user credentials for web-based mail accounts including Gmail accounts," a Google spokesperson told the Beeb. "As soon as we learned of the attack, we forced password resets on the affected accounts. We will continue to force password resets on additional accounts when we become aware of them."
Google went on to say that the scam was not a breach of Gmail security but "a scam to get users to give away their personal information to hackers."
The news comes following a previous report in which the BBC claimed to have seen a list of 20,000 logins and passwords for Hotmail, Yahoo, AOL, Gmail and other accounts. This number has since crept up to 30,000.
I think I speak for everyone when I say, 'Ugh!' There's nothing more annoying than a phishing scam that forces you to change your passwords for everything 'just in case.'
It's that easy people.
Yeah, it'll be that easy until you get hit by a DNS hijacking attack. There are two kinds of people that get duped by phishing attacks: The arrogant, and the ignorant. Don't be either.
While you are correct that a DNS hijack could occur, I was simply referring to the context of the article. Regardless of the fact that DNS hijacking is a much less effective way of securing user information than phishing (it's also less prevalent) , but if somehow someone did manage to compromise your system and change your DNS settings you have much larger problems.
I believe this also could be a serious breach in security,especially since many blogs are not related.
Makes me not dare to reply on any but a trusted blog; or use a scam/crap/spam email, which they can have the password to,and access to the tens or hundreds of daily spam mails.
Just a little over-dramatic? I can think of a LOT more annoying things than my e-mail provider taking an extra step to keep my account secure. (like, oh, having all my personal information stolen, my credit ruined, etc. Not to mention everything else in the world) Given that most businesses require password changes for employees on a regular basis anyway (including all the ones I've worked at for the past 10 years), I'm pleased to see Google taking the extra step 'just in case' to help protect its users. If that's the extent of the inconvenience then we should be grateful.