Skip to content
Submit incident
AII-1002-66233
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.Supporting sources are pending verification.

AI-Powered Phishing Campaign Threatens Gmail Accounts Worldwide

Google has warned of a widespread phishing campaign exploiting artificial intelligence to target approximately 2.5 billion Gmail users globally. The campaign reportedly uses an AI system called "DeepPhish" that analyzes publicly available data to craft convincing phishing emails mimicking legitimate contacts.

7 February 2025 Β· Google Β· Fraud, scams and manipulation
7 February 2025
AII-1002-66233
Quick facts
Category
Fraud, scams and manipulation
Country
Croatia
Date
7 February 2025
Drafted by
Raidu Incident Detection

What happened

Google has warned of a large-scale phishing campaign in progress that uses artificial intelligence to target Gmail users. Cybercriminals are using an AI system called "DeepPhish" to execute sophisticated attacks.

DeepPhish analyzes publicly available data, such as information from social media or previous data breaches, to create convincing phishing messages. The system can generate flawless emails that mimic the writing style of known contacts, eliminating traditional warning signs such as poor grammar or unusual headers.

Reported impact

The campaign poses a serious threat to approximately 2.5 billion Gmail users worldwide. Experts advise users to take immediate measures to protect their accounts, including using strong and unique passwords, enabling two-factor authentication, and being cautious when opening emails.

Classification

Category
Fraud, scams and manipulation
Industry
Digital security
Country
Croatia
Harm status
Potential harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property
Harmed
Consumers
Failure modes
Manipulation or dark pattern
AI systems
DeepPhish

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident