
Google has issued a major security alert to its 2.5 billion Gmail users worldwide, warning them of rising hacking attempts and urging them to strengthen their account protection measures.
The Alphabet-owned tech giant emphasised the importance of updating passwords regularly and enabling additional security features such as two-factor authentication (2FA).
According to Google, hackers are using sophisticated phishing tactics to steal Gmail credentials. These attacks often involve fraudulent emails that redirect users to fake sign-in pages or trick them into revealing their two-factor authentication codes.
While the majority of users create strong and unique passwords, internal data shows that only about one-third of Gmail users update their passwords consistently, leaving accounts vulnerable to evolving threats.
The company has also pointed to broader cyber risks following a breach linked to its Salesforce database.
In June, Google revealed that hackers were launching targeted social engineering attacks by impersonating IT support personnel, a method described as “particularly effective in deceiving employees.”
In a blog post, Google noted that "we believe threat actors using the 'ShinyHunters' brand may be preparing to escalate their extortion tactics by launching a data leak site (DLS)."
"These new tactics, including those linked to the recent UNC6040 Salesforce-related data breaches, are probably meant to put more pressure on victims," the company added.
On August 8, Google began sending emails to all users affected by the incident, stressing the importance of stronger security measures to stop similar incidents in the future.