News for hackers. Stuff that matters.

A comment on Scammed out of $130K via fake Google call, spoofed Google email and auth sync. Parent comment

Re:Scammed out of $130K via fake Google call, spoofed Google... by davidscoville on Tuesday September 16, 2025 @08:26PM (#45270061)
Yes, at least two emails. One was the spoofed email from [email protected] (which sadly convinced me this was legit) and the other was a Google recovery code email.

The spoofed email was deleted by the attacker, but I have a copy because I forwarded the email to [email protected] (something ChatGPT told me to do). The attacker then deleted the original but when I got my account back an hour later, Google bounced back the email. So that is the copy I have and the headers are not super helpful.

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by digianarchist on Tuesday September 16, 2025 @11:46PM (#45271435)
Any check mark?

https://www.thesslstore.com/blog/wp-content/uploads/2023/05/...

Edit: I searched my email and it doesn't look like they are doing this at all with their accounts.

Edit II: Looks like it's on hold: https://blog.kickbox.com/gmail-bimi-exploit-what-you-need-to...

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by blactuary on Tuesday September 16, 2025 @09:26PM (#45270478)
"(something ChatGPT told me to do)"

You're going to get hacked again

[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by furyofantares on Tuesday September 16, 2025 @08:28PM (#45270069)
That makes sense, thanks for the clarification.
[ Parent | on HN ]
Re:Scammed out of $130K via fake Google call, spoofed Google... by thebytefairy on Wednesday September 17, 2025 @09:41AM (#45275742)
What was the process for getting your account back?
[ Parent | on HN ]