Somebody in Iran tries to collect Google account passwords

1 points by armenb ↗ HN
Today I received following email from a fake email address (settings@gmail.com)

---

Dear user Add an alternate email address to your account You can use alternate email addresses to sign in to your Google Account, recover your password, and more. Alternate email addresses can only be associated with one Google Account at a time. In some cases, a person who shares an item with your alternate email address will be able to see your primary email address. Please add an alternate email address:

https://accounts.google.com/b/0/EditUserInfo

---

Above URL was linked to following URL

http://accountsgmail.com/Users/en01/Logins/?u=bm9uLWV4aXN0ZW5jZS5lbWFpbC5hZGRyZXNzQGdtYWlsLmNvbQ==&.pads=ssdfhsdjfhg4534jfsdre5345rfdrs56rtgf

This is a phishing attempt to collect users' Google account passwords. Check the whois entry of accountsgmail.com.

Disclaimer: I've changed the email address from the above URL to "non-existence.email.address@gmail.com", it's encoded in base64

0 comments

[ 2.8 ms ] story [ 11.2 ms ] thread

No comments yet.