GOOGLE has warned millions over a dangerous and costly scam – and says spotting a “random emoji” red flag that saves you.
The tech giant says it’s now a “frequent” con that is increasingly convincing.
It’s a type of phishing scam, where online crooks use tech to mimic a person, website, or app that you trust.
In a security memo, Google’s Laurie Richardson said that the scam has been “increasing in volume and complexity”.
“They are often carried out by transnational crime organizations,” said Laurie, Google’s VP of Trust and Safety.
“Bad actors who operate at scale, constantly adapt their methods, and combine online and offline activity to lure people into their fraudulent schemes.”
This type of “clone scam” involves closely recreating apps and website landing pages from official brands.
You might not notice anything wrong, but they’re extremely dangerous.
“These deceptive pages often mimic the appearance of legitimate websites to trick users into divulging personal information, downloading malware or making fraudulent purchases,” Laurie explained.
“Tech support scams are a frequent tactic used by these scammers.
“Scammers create fake landing pages that closely mimic official customer support sites, tricking users into providing sensitive information or making payments for non-existent services.”
Google says that login portals are now a “prime target” for scammers.
These fake log-in pages look just like the real thing.
But these “deceptive replicas” can trick you into handing over sensitive info.
Google warned that crooks are increasingly targeting employees because it can be more profitable.
“By exploiting the trust employees have in their company’s login process, scammers can gain unauthorized access to internal systems, potentially leading to data breaches, financial loss and reputational damage,” Laurie said.
HOW TO STAY SAFE
Even though these fake websites and apps can be extremely convincing, the ways of avoiding being caught out remain the same.
TOP 20 MOST COMMON PASSWORDS IN BRITAIN
Here’s a list of the most common passwords in Britain. If yours is on the list, change it right now or it could be hacked in seconds…
- password
- qwerty123
- qwerty1
- 123456
- liverpool
- 123456789
- password1
- qwerty
- liverpool1
- arsenal
- 12345678
- chelsea
- Password
- charlie
- football
- abc123
- arsenal1
- rangers
- Password1
- charlie1
The list was created by NordPass – read about the report at The Sun here.
You should avoid clicking unsolicited links sent via email or text.
And make sure to navigate directly to official websites or apps, so you know you’re interacting with the real thing.
Google said there are some clues to look out for that might help you to stay safe.
“Always try to find information on a company’s official website,” Google warned.
Look closely for subtle misspellings, strange formatting, unusual fonts or random emojis.
“It’s important to be wary of information from unofficial sources.
“And look closely for subtle misspellings, strange formatting, unusual fonts or random emojis — these could be red flags for a fake site.”
The tech giant said that you should try using its ‘About This Result’ feature.
Read more on the Scottish Sun
You can find that by clicking the three dots next to a search result on Google.
“It gives valuable insights about the source, which can help you see whether it is a legitimate landing page,” Google explained.