Google Phishing Scam Mimics Iran Login Alerts

A new phishing scam is circulating, using fake Google alerts to trick users into believing there's an attempted login from Iran. These fraudulent messages urge recipients to urgently contact a "support center" via a provided phone number. The scam was identified by Fisherman Security, which noted that some numbers use prefixes like 1-809 to appear legitimate, similar to the common 1-800 toll-free prefix. Some of these numbers may lead to expensive international calls.

Fisherman Security warns that other numbers are used for phone phishing, aiming to steal money, mirroring tactics previously seen against Binance users with fake support centers. Matan Gadanian, CEO of Fisherman Security, stated that attackers exploit fear and trust-building elements to make users dial premium numbers or contact impersonators for financial theft. The National Cyber Directorate has also issued a warning about similar impersonation attempts targeting users of Binance and other platforms.

These scams involve messages, sometimes appearing within legitimate conversation threads, claiming an unusual login attempt and directing users to a phone number. During the call, the scammer requests personal information like email addresses, financial account details, or login credentials. The National Cyber Directorate advises users not to call back suspicious numbers, share passwords or account details, or confirm actions in unsolicited calls. They emphasize checking account status only through official apps or websites and caution that even messages within familiar threads can be deceptive.