CYBER CRIME & CYBER SECURITY TRENDS IN AFRICA Infographic: How The Gmail Scam Works How the Gmail Scam Works 555-283-4972 ...@gmail.com Account Help 1 John Doe ...@gmail.com Get a verification code on my phone: ****555 An attacker obtains a victim’s email address and phone number—both of which are usually publicly available. Receive via: a text message (SMS) an automated phone call Continue The attacker poses as the victim and requests a password reset from Google. 4 The attacker then texts the victim with a message similar to: 3 483829 “Google has detected unusual activity on your account. Please respond with the code sent to your mobile device to stop unauthorized activity.” 6 The attacker can then reset the password and once they have what they want or have set up forwarding, can inform the victim—again posing as Google—of their new temporary password, leaving the victim none the wiser. 2 Google sends the code to the victim. 5 483829 new password Source: Symantec The victim therefore expects the password-reset verification code that Google sends out and passes it on to the attacker. 13