More trouble for Gmail as phishers attack
When it rains, it pours. Convincing phishing attacks target Gmail after its outage earlier this week.

Gmail was hit with more trouble this week as its users were targeted with a phishing campaign that spread through the connected real-time Google Talk IM system.
The issue came soon after Gmail had been knocked offline for two-and-a-half hours due to a problem with an overloaded data centre, which had a knock-on effect on other data centres.
The phishing attack used a social engineering technique whereby GTalk users were tricked into clicking a link directing them to a ViddyHo login page asking for login credentials.
Once the victim entered their Google account information, the criminal could then use it to break into their account and send the link to other users in the victim's address book or buddy list.
In a statement to the Wall Street Journal, Google confirmed that it was a phishing attempt, and encouraged users to be very careful when sharing information.
Graham Cluley, security consultant at Sophos, said: "If you were unfortunate enough to fall for this scam- make sure you change your Gmail password immediately."
"In fact, also change your passwords on any other site where you might be using the same password as on Gmail."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
He claimed that around 41 per cent of people used the same password for every site they accessed, which meant that an attack like this could have disastrous consequences.
-
LaunchDarkly to "double down" on observability with Highlight acquisition
News Highlight's observability tools will be integrated into LaunchDarkly's Guarded Releases software deployment service
By Daniel Todd
-
Samsung Galaxy Tab S10 FE review
Reviews The Tab S10 FE retains the feel and core capabilities of Samsung's high-end S10 tablets, but compromises on the display and the performance
By Stuart Andrews
-
I love magic links – why aren’t more services using them?
Opinion Using magic links instead of passwords is safe and easy but they’re still infuriatingly underused by businesses
By Solomon Klappholz
-
Password management startup Passbolt secures $8 million to shake up credential security
News Password management startup Passbolt has secured $8 million in funding as part of a Series A investment round.
By Ross Kelly
-
LastPass breach comes back to haunt users as hackers steal $12 million in cryptocurrency
News The hackers behind the LastPass breach are on a rampage two years after their initial attack
By Solomon Klappholz
-
Microsoft 365 admins warned over new Gmail anti-spam rules
News Microsoft 365 users have been warned they could be penalized for failing to adhere to new anti-spam standards
By Ross Kelly
-
GitHub launches passkeys beta for passwordless authentication
News Users can now opt-in to using passkeys, replacing their password and 2FA method
By Daniel Todd
-
Microsoft SQL password-guessing attacks rising as hackers pivot from OneNote vectors
News Database admins are advised to enforce better controls as attacks ending in ransomware are being observed
By Rory Bathgate
-
No, Microsoft SharePoint isn’t cracking users’ passwords
News The discovery sparked concerns over potentially invasive antivirus scanning practices by Microsoft
By Ross Kelly
-
Google launches dark web monitoring tools for US Gmail users
News First launched for Google One customers, the dark web report service is rolling out to all US-based Gmail users
By Ross Kelly