Google Security Alert Scam Targets Israelis

A phishing scam impersonating Google security alerts has been targeting users in Israel since yesterday. The fraudulent messages warn recipients of a supposed hacking attempt or unauthorized login to their account, allegedly originating from Iran. Instead of directing users to Google's official security interface, the fake alerts urge them to urgently call a displayed phone number presented as a "support center."

The scammers are using phone numbers that begin with the 1-809 prefix, which may resemble the 1-800 prefix associated with toll-free service numbers. This tactic could trick users into believing they are calling a legitimate support line. However, dialing these numbers may incur international call charges, potentially costing users money simply for making the call.

In some instances, the scam messages include local phone numbers for "vishing" attempts, which is phishing conducted via phone calls. The scammer, posing as a support representative, then tries to extract sensitive information such as account details, passwords, or financial data. This method has been previously observed in scams impersonating financial platforms.

Matan Gadanian, CEO of Fisherman Security, stated that attackers exploit fear and fake trust-building elements to trick users into calling premium-rate numbers or contacting fraudulent support centers designed to steal money. He noted that these tactics are similar to those previously identified in scams targeting financial platforms.

To avoid falling victim, users are advised that if they receive a message warning of unusual activity on their Google account, they should not use the phone number or link provided in the message. Instead, they should independently log into their account to check security alerts and recent activity.