![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/10\/evil-google-call-center-android-robot-600x400-1.jpg\")
<\/p>\n<\/p>\n
Did you get an unexpected alert from Google asking “Is it you trying to recover your account?” Or did you receive a phone call that seems to be from a Google call center, claiming there’s “suspicious activity”? You might be the target of an AI-powered account takeover scam.<\/p>\n
It’s hard to believe that we’re at the point where hackers use AI voice bots to social-engineer people and hack into accounts. And yet, here we are.<\/p>\n
Let’s break down the scam and how it works. Here’s what you should do now to avoid having your Google or Gmail account hacked.<\/p>\n
In this article:<\/em><\/p>\n You may have a Google app installed on your phone, such as Gmail. If so, and if someone tries to hack into your Google account, you may get an alert delivered via a push notification, similar to the following:<\/p>\n Is it you trying to recover your account?<\/strong><\/p>\n[your Google avatar and Gmail address]\n Device<\/strong> Near<\/strong> Time<\/strong> (\u274c No, don’t allow)\u00a0 (\u2705 Yes, it’s me)<\/p><\/blockquote>\n No matter what the “Device” line says in the alert you received, the source device is definitely not a Google Support representative trying to recover access to your account for you. It’s always an attacker trying to break into your account (again, unless you personally tried to recover your account at that exact moment).<\/p>\n If you ever get an alert similar to this when you aren’t expecting it,\u00a0always<\/strong><\/em> click on the “\u274c No, don’t allow” button. Then be sure to follow the steps in the “How to avoid getting hacked” section below.<\/p>\n (Note that the push notification will be from the Google or Gmail app itself,\u00a0not<\/em> from an e-mail. If you see something like the above in the body of an e-mail message, don’t click on anything.)<\/a><\/p>\n In this particular scam, you might also get a follow-up telephone call. It might even look like it comes from a Google phone number\u2014but scammers can easily spoof this.<\/p>\n And it might sound like a real person\u2014in theory, it might be. But in recent attacks, hackers have been deploying artificial intelligence<\/a> bots with realistic-sounding voices<\/strong> instead. Because they’re powered by AI, they can plausibly respond to your questions or concerns.<\/p>\n Often, call recipients are skeptical. During the call, the bot may send an e-mail to your Gmail account that, at first glance, might appear legitimate. It may even appear to be sent from an “@google.com” address; again, this is spoofable. It might be sent to, or CCed to, an address at “internalcasetracking(.)com”\u2014a domain that was registered three months ago, and doesn’t belong to Google.<\/p>\n Typically, the body of the e-mail refers to an “Agent” followed by the name the bot gave you. It often claims, “Your Case #[8-digit number] for Google Workspace has been updated.” The e-mail often signs off with “Thank you for your cooperation” followed by “Best regards, Google Account Security Team.”<\/p>\n This e-mail doesn’t actually come from Google\u2014even if it looks like it might. In reality, it’s a scam. If you get such a message, please use the “Report phishing” option<\/strong> in Gmail.<\/a><\/p>\n If you get an “Is it you\u2026?” alert like the one above, it’s critically important to first say “\u274c No, don’t allow,” and then change your password and enable two-step verification for your Google account<\/a>. You should do both via the official Google site linked below. (You shouldn’t trust any supposed Google links you got via e-mail, text message, or even Google search results<\/a>.)<\/p>\n Changing your password to something long, complex, and unique\u2014never used elsewhere<\/a> is crucial to ensure that someone can’t find your password in a data breach<\/a>. And enabling two-step verification (also called two-factor authentication<\/a>) provides an additional layer of protection for your account.<\/p>\n You might not realize it, but your e-mail account is one of the ones you need to protect the most.<\/strong> Think about this: most sites offer a “reset password” function. How do these typically work? They send you an e-mail with a password reset link. Now imagine what an attacker can do if they get access to your e-mail. It becomes clear that safeguarding your e-mail account should be a high priority for everyone.<\/a><\/p>\n We’ve previously covered a number of scams on The Mac Security Blog, including some that have similarities to this one. Common scams you should beware of include the following:<\/p>\n Be sure to sign up for our free e-mail newsletter<\/a><\/strong> to stay up to date on the latest scams and threats to your security and privacy.<\/a><\/p>\n To read more about this AI voice scam, see this X post<\/a> from Garry Tan and deep-dive blog post<\/a> by Sam Mitrovic.<\/p>\n You can also subscribe to our e-mail newsletter<\/strong><\/a> and keep an eye here on The Mac Security Blog<\/strong><\/a> for the latest Apple security and privacy news. And don’t forget to follow Intego on your favorite social media channels: \u201cIs it you trying to recover your account?\u201d Beware; A.I. voice bots are being deployed in this complex Google account hijacking scam to get into your Gmail account.<\/p>\n","protected":false},"author":14,"featured_media":102138,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[3316,59,60,4039,116,2380],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\n\t\n\t\n\t\n\n
The “Is it you\u2026?” alert on your phone<\/h3>\n
\nGoogle Support: [alleged support rep’s name]\n
\nCalifornia, USA [or any other location]\n
\nJust now<\/p>\nThe AI-voice phone call and follow-up e-mail<\/h3>\n
How to avoid getting hacked<\/h3>\n
\n
Why is it important to change your password and enable two-step verification?<\/strong><\/h4>\n
Other scams to watch out for: Apple, sextortion, and fake invoices<\/h3>\n
\n
How can I learn more?<\/h3>\n
![\"\"](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2021\/04\/intego-podcast-artwork-400.jpg\")
<\/a>Each week on the Intego Mac Podcast<\/strong><\/a>, Intego’s Mac security experts discuss the latest Apple news, including security and privacy stories, and offer practical advice on getting the most out of your Apple devices. Be sure to follow the podcast<\/strong><\/a> to make sure you don\u2019t miss any episodes.<\/p>\n![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/X-Twitter-logo-icon-225.gif\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/Facebook-logo-icon-225.gif\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/YouTube-logo-icon-225.png\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/LinkedIn-logo-icon-225.gif\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/Pinterest-logo-icon-225.png\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2024\/03\/Instagram-logo-icon-225.gif\" "\\"Follow"){kind=icon}
<\/a>\u00a0![\"Follow](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2017\/10\/ios9-podcasts-app-tile.png\" "\\"Follow")
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"