AI-Generated Phishing Scam Targets Gmail Users Globally
Cybercriminals are using AI-generated voice calls and phishing emails to trick Gmail users into revealing credentials and banking data. The FBI has warned that the scam targets up to 2.5 billion Gmail users, combining deepfake voice calls with fake websites mimicking Google's official platform.
What happened
Cybercriminals use AI to generate deepfake voice calls that inform victims of suspicious account activity, followed by phishing emails containing links to fake Google websites designed to steal credentials.
The scam combines social engineering with AI-generated audio to create convincing communication that bypass security filters, targeting Gmail users to obtain recovery codes and banking data.
Reported impact
The FBI warned that the scam targets up to 2.5 billion Gmail users and can result in serious financial losses, reputational damage, and compromise of sensitive data.
Compromised Gmail accounts expose all connected services, and accessed banking and personal information can lead to unauthorized account access and financial theft.
Index analysis
Security firm Malwarebytes noted that AI tools used by cybercriminals are economically affordable, with advanced email attack tools starting at just 5 dollars, and convincing deepfakes can be created in under 10 minutes.
Spencer Starkey of SonicWall warned that attackers continuously improve their methods, making it increasingly difficult for companies to protect users, while FBI official Robert Tripp stated that perpetrators leverage AI to create extremely realistic audio and video messages.
Governance controls
Malwarebytes issued guidelines recommending that users not click links in unsolicited emails, verify website legitimacy before entering personal information, use password managers only on trusted sites, and monitor accounts for unauthorized access.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.