[ad_1]
Gmail Checkmark System Hacked by Scammers
Google’s email service, Gmail, is one of the most widely used email clients in the world. Its security features make it a popular choice for people who need to protect their online communications. Unfortunately, one of its new security features, the checkmark system, has been hacked by scammers who are using it to trick users into thinking that their phishing emails are legitimate.
Gmail Checkmark System
Gmail’s new blue checkmark sender verification system — as it should work
The Gmail checkmark system is designed to help users discern which emails are legitimate and which may have been sent by impersonators running scams. The system highlights verified companies and organizations to users with a blue checkmark. This is meant to instill confidence in Gmail users that the emails they receive are genuine and legitimate.
Hacking of Checkmark System
Scammers hacking Gmail’s new sender verification system
Cybersecurity engineer, Chris Plummer, reported that scammers found a way to hack the checkmark system. They convinced Gmail that their fake brands are legitimate, thereby using the confidence the checkmark system is supposed to instill against Gmail users. Google initially dismissed the discovery as intended behaviour before acknowledging the error.
Fixing the Flaw
“After taking a closer look we realized that this indeed doesn’t seem like a generic SPF vulnerability. Thus we are reopening this and the appropriate team is taking a closer look at what is going on.
We apologize again for the confusion and we understand our initial response might have been frustrating, thank you so much for pressing on for us to take a closer look at this!
We’ll keep you posted with our assessment and the direction that this issue takes.
Regards, Google Security Team”
Google listed the flaw as a ‘P1’ (top priority) fix, which is currently in progress. Until Google has a fix for the flaw, the Gmail checkmark verification system remains broken and is being used by hackers and spammers to trick users.
Conclusion
The Gmail checkmark system is designed to provide users with greater confidence in the security of their email communications. Unfortunately, hackers and scammers have found a way to hack the system, thereby undermining the very purpose it was meant to serve. Google is currently working on a fix for the flaw, but until such time as the flaw is addressed, users should remain vigilant when opening emails from unfamiliar sources.
FAQs
What is Gmail’s checkmark system?
Gmail’s checkmark system highlights verified companies and organizations with a blue checkmark to help users discern which emails are legitimate and which may have been sent by impersonators running scams.
How have scammers hacked the checkmark system?
Scammers have found a way to convince Gmail that their fake brands are legitimate, thereby using the confidence the checkmark system is supposed to instill against Gmail users.
Has Google acknowledged the flaw in the checkmark system?
Google initially dismissed the flaw as intended behaviour before acknowledging the error and listing it as a ‘P1’ (top priority) fix.
What should users do in the meantime while Google works on a fix?
Users should remain vigilant when opening emails from unfamiliar sources and treat any unexpected emails with caution.
[ad_2]
For more information, please refer this link