News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by fkskammerz on Tuesday September 16, 2025 @01:53PM (#45265511)
It was not legit from legal, I had the same attack on me two weeks ago. They were pretending to be from Google General Counsel responding to an estate request to my Google account being handed to another party who was supposedly the inheritor.

What clued me in was that he said he couldnt share the estate documents with me until I gave him my popup 2FA code.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by edm0nd on Tuesday September 16, 2025 @04:41PM (#45267737)
It was legit from Google email and servers.

You cannot spoof an email from @google that will inbox

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by twostorytower on Tuesday September 16, 2025 @05:46PM (#45268558)
They clearly did.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by edm0nd on Tuesday September 16, 2025 @07:23PM (#45269578)
You can trigger emails from Google on behalf of other users or use a platform like Google Cloud or Google Sites to trigger emails that come from real Google servers.

This was not spoofed.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by layman51 on Tuesday September 16, 2025 @10:44PM (#45271017)
Were there any further login attempts that they tried to do to access your Google Account? It almost seems like the attack being described in the article is very sophisticated that the attackers aren't just contacting random people but might have certain people in their radar.
[ Parent | on HN ]