Ethical Hacking course like CEH, now is the time to do it. With the rising incidents of data breaches happening today, companies are betting big on IT security professionals to bolster their defenses against such unwanted and unauthorized intrusions.
In the latest development, hacking attempts were made to target nearly 1.5 billion Google service users. Hackers are trying to target users of popular Google services to steal their login credentials.
Security researchers working at Kaspersky believe that hackers are targeting Google users through a credential stealing attack. Gmail and Google Calendar users are receiving anonymous notifications that include a link to a phishing URL. On clicking the link, the users are getting redirected to malicious websites from where user credit card credentials are stolen.
According to a report by Kaspersky, the problem lies with Google Calendar’s feature that allows hackers to create an event and send automatic notifications to Google users.
Maria Vergelis, security researcher at Kaspersky said, “The ‘calendar scam’ is a very effective scheme, as most people have become used to receiving spam messages from emails or messenger apps. But this may not be the case when it comes to the Calendar app, which has a main purpose to organize information rather than transfer it.”
Researchers refer to this as a sophisticated scam targeting Gmail users. The services are primarily targeted though the use of malicious and unsolicited Google Calendar notifications. The main functionality of inviting guests in calendar event is exploited to target the users. When a calendar invitation is sent to a user, a pop-up appears on their smartphone.
The cyber attackers have been using this technique to spam users with phishing links to credential stealing sites. The attackers encourage users to provide bank account or credit card details. This is beyond normal phishing attacks, it opens a whole host of social engineering attacks.
Kaspersky advises users to turn off the automatic adding of calendar invitations. You can find the option in ‘Event Settings’ menu in Google Calendar. You can disable automatic invitation adding option by enabling ‘only show invitations to which I’ve responded’.