Warning to all 1.8bn Gmail users over ‘hidden danger' that steals password without you noticing – what to watch out for
The new type of attack has been flying under the radar, attacking an eye-watering 1.8 billion Gmail users without them even noticing.
2
Malicious actors are targeting 1.8 billion Gmail users through an email scam
Credit: Getty
Users therefore need to make sure they follow the correct instructions in order to combat the malicious activity.
Thieving hackers are using Google
Gemini
- the company's AI built-in tool - to trick users into giving over their
Cybersecurity experts have found that
These tricks users into
READ MORE TECH NEWS
The
Shady
GenAI bounty manager Marco Figueroa demonstrated how such a dangerous prompt could falsely alert users that their email account has been compromised.
These warnings would urge victims to call a fake "Google support" phone number provided, in order to resolve the issue.
Most read in Tech
To fight these prompt injection attacks, experts have made a number of recommendations that users should act on immediately.
They firstly suggested that companies
Google adds AI upgrade to your Gmail that writes emails for you – find it in seconds if you're eligible for freebie
This should help counter hackers sending invisible text within emails.
Security experts also recommended that users implement post-processing filters to scan inboxes for suspicious elements like "urgent messages", URLs, or phone numbers.
This action could bolster defences against threats.
The scam was brought to light after research, spearheaded by Mozilla's 0Din security team, showed proof of one of the hostile attacks last week.
The report showed how hackers tricked Gemini into showing a fake security alert.
It warned users their password had been stolen - but the message was fake and designed to steal their info.
The trick works by hiding a secret size zero font prompt in white text that matches the email background.
So when someone clicks "summarise this email" using Gemini, the tool reads the hidden message - not just the visible bit.
This form of manipulation is named "indirect prompt injection", and it takes advantage of AI's inability to differentiate between a user's question and a hacker's embedded message.
AI cannot tell the difference, as both messages look like text, and it will usually follow whichever comes first - even if it is malicious.
As Google have failed to patch this method of scamming victims, the door is still open for hackers to exploit this technique.
Sneaking in commands that the AI may follow will be an effective method of leaking sensitive data until users are properly protected against the threat.
AI is also incorporated into Google Docs, Calendar, and outside apps - widening the scope of the potential risk.
Google has reminded users amid this scamming crisis that it does not issue security alerts through Gemini summaries.
So if a summary tells you that your password is at risk, or prompts you with a link to click - users should always treat it as suspicious and delete the email.
2
Users need to follow the steps to protect against the scam
Credit: Alamy
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Irish Examiner
4 hours ago
- Irish Examiner
Small Irish firms 'have not yet explored full potential of AI', survey finds
Just 40% of small Irish firms have implemented AI in some form across their business, but its use remains 'shallow' and is mostly confined to content generation and simple data analysis, a new survey has found. According to research conducted by Amárach on behalf of the Small Firms Association, 8% of firms have already incorporated AI into most of their business areas, while 13% said they had started incorporating it into some of their business. A further 19% said they had started to experiment with AI in some business areas. Another 22% said while they had started looking into how AI might be used in their business, they had yet to start using it. Small Firms Association director David Broderick said while the survey showed that although small businesses were interested and curious about AI, "adoption remains shallow among small firms as it is mostly confined to content generation and simple data analysis, rather than innovation, product development, or decision-making'. 'Therefore, many businesses have not yet explored its full potential,' he said. Mr Broderick added small businesses needed to 'adopt AI strategically to keep up with large businesses to survive'. In total, 357 companies were surveyed as part of this research. Of the firms who use AI, 66% said it was utilised in their sales and marketing, including content creation, while 44% said it was being used in their data analytics. It also found 35% of firms had implemented the technology in chatbots and customer support. Read More John Whelan: Every penny of available Apple cash needed to back Irish AI development
The Irish Sun
17 hours ago
- The Irish Sun
Fears of Amazon price hike and MORE ads as company boss teases worrying change for shoppers
AMAZON has sparked concern that more ads could pop up on Alexa devices as it introduces new AI features to the popular voice assistant. The company's new AI supercharged Alexa is still rolling out, which users can pay for if they don't have a Prime membership. Advertisement 2 Alexa is the world's most famous digital voice assistant Credit: Getty 2 Alexa+ is still rolling out in the US with no update on when it'll land in the UK Credit: Getty Alexa+ is optional and costs $19.99 (£15) per month without a Prime subscription. But there could be even more ads on the way as Amazon looks to make its devices profitable. Currently, users already see some limited ads, such as on Echo Show displays. There's also the "By the way" feature that makes subtle suggestions to you based off what you ask Alexa. Advertisement Amazon chief Andy Jassy has now hinted other ads are in the works. "There will be opportunities, as people are engaging in more multiturn conversations [with Alexa Plus], to have advertising play a role to help people find discovery, and also as a lever to drive revenue," he said during a recent investor call. TechCrunch has speculated that this could mean paying extra for an ad-free tier of Alexa. But users have raged over the idea and mocked possible scenarios. Advertisement "When you tell it to turn on your lights, it'll turn on the lights and then give a 15 second advertisement for other lights you could buy on one joked on Reddit. "All I want it to do is provide random facts when I ask about them, play the music I ask it to and adjust the household settings I tell it to," another person commented. "I don't want suggestions and I sure as s*** won't be listening to ads." A third added: "They are a glorified Bluetooth speaker. Advertisement "I will throw mine in the trash before I suffer through a single ad." And a fourth said: "I already stopped watching prime because of the ads. I'm fine dropping Alexa too." There's still no word on when Alexa+ will be rolled out to other countries including the UK.
RTÉ News
21 hours ago
- RTÉ News
Is AI making our brains lazy?
Have you ever googled something but couldn't remember the answer a short time later? Well, you're probably not alone. Multiple studies have shown that "digital amnesia" or the "Google effect" is a consequence of having information readily available at our fingertips. It happens because we don't commit the information to memory in the knowledge that we can easily look it up again. According to The Decision Lab, this bias exists not only for things we look up on internet search engines but for most information that is easily accessible on our computers or phones. For example, most of us can't remember friends, family members or work colleagues' phone numbers by heart. So how can we help our brains to remember information? "Writing is thinking," said Professor Barry O'Sullivan from the School of Computer Science & IT at UCC. Professor O'Sullivan believes there are learning benefits associated with Large Language Models (LLMs), but his view is that we should be applying a precautionary principle to them as its such early days. "If you're not the one doing the writing then you're not the one doing the thinking, so if you're a student or you're the employee, the writing really does need to be yours," he said. LLMs with chatbots or virtual assistant chatbots such as Gemini or ChatGPT, have been trained on enormous amounts of text and data and their systems are capable of understanding and generating human language. With these rapid advances in AI certain tasks are now easier, and when used effectively can save time and money, in our personal and working lives. However, there are concerns about critical thinking, creativity and problem solving. Some AI companies claim their models are capable of genuine reasoning, but there's ongoing debate over whether their "chain of thought" or "reasoning" is trustworthy. According to Professor Barry O'Sullivan, these claims "just aren't true." "These large language models don't reason the same way as human beings," he said. "They have pretty weak abilities to reason mathematically, to reason logically, so it really is the big stepping stone, but it's always been the big stepping stone in AI." he added. He cautions people and workers to use these tools as an assistant, and as a sometimes "unreliable assistant". Professor O'Sullivan also warns AI generated answers could contain a biased view of the world, that is when human brain power is needed to apply sense, reasoning and logic to the data. The Google Search Engine was launched in 1998 and is considered a narrow form of AI. Since then, there have been many studies highlighting how the "Google Effect" is a real phenomenon and its impact on how we remember and learn. Launches such as Open AI's chatbot ChatGPT, and more recently Google's AI Overviews and AI Mode search are all relatively new, meaning there has been less time to study the effects. A new study by researchers at the media lab at Massachusetts institute of Technology (MIT) "Your Brain on ChatGPT", divided 54 people aged 18 to 39 into three groups to write essays. One group used Open AI's ChatGPT, one used Google's Search Engine, and the remaining group used no tools; they had to rely purely on brain power. While it was a very small study and in a very specific location (Boston), it found that of the three groups, ChatGPT users had the lowest brain engagement. While in the brain-only group, researchers found they were more engaged and curious, and claimed ownership and expressed higher satisfaction with their essays. The study suggests the use of LLMs, such as ChatGPT which is what they used but is similar to other LLMs, could actually harm learning, especially for younger users. "The MIT study is one source, but there isn't any definitive evidence of that, however the growing amount of evidence does seem to be tipping on that side of the argument that the more we rely on very sophisticated reasoning systems that can automate the process of writing, the less we are thinking," said Professor O'Sullivan. "People should remember that writing is thinking, so when you when you give up the writing to somebody else, you're not thinking anymore and that does have a consequence." Is digital dependence shaping our brains? Whether in education or in the workplace, the use of AI is becoming increasingly prevalent. In a nutshell it does appear to be shaping our brains, but the debate continues over whether it's happening in a negative or a positive way. As a professor in UCC, Mr O'Sullivan ponders over whether table quizzes are as popular as they used to be, and how young people view need-to-know information. "You often hear students saying, "Well I don't really need to know that because if I was out on the job I'd Google it, and wouldn't that be just fine?" "It is to some extent fine for some pieces of information, but it's also important to know why the information is that way, or what the origin is, or why things are that way," Professor O'Sullivan said. There is a skill shift happening with how we and our brains engage with new technology. This is why human judgement and decision making is more important than ever according to Claire Cogan, behavioural scientist and founder of Behaviour Wise. "There is an effect (from AI) on how the brain learns, so there's an impact on brain health. Some of that is relevant to employers, and its very relevant to individuals," said Ms Cogan. AI is useful in the workplace when it can automate mundane or time-consuming tasks such as generating content and extracting key points from large amounts of data. Ms Cogan noted the theory is when people talk about the pluses and minuses, AI should free up time to allow people to do other things. "So as long as that balance is there, it's a good thing. If that balance isn't there, then it's simply going to have a negative impact," she stated. Referring to the MIT study, she assessed it found evidence that using AI can slow attention and have an impact on the working memory. "The brain will go for shortcuts, if there's an easier way to get to something, that's the way the brain will choose," said Ms Cogan. "However, there are still areas where human intelligence far outweighs anything AI can do, particularly around judgment and decision making, and they're going to become more and more important," she stated. "That's the side driven by people, so there's a whole new skill where people are going to have to learn how to judge when to use AI, how to use it, how to direct it, and how to manage it," she said. Does reliance on AI impact on critical thinking in the workplace? Since the late 90s people have been using search engines to find facts. With the advances and sophistication of AI people are becoming more wary, with real concerns about misinformation, disinformation and deep fakes. So while we are relying on AI tools to help find information, it's more important than ever that we engage core human skills in terms of decision making. Ms Cogan believes in an ideal world teachers and lecturers would be almost preparing people for what is going to happen in five or more years. "It's a particular skill to know when and when not to use AI, just teaching the value in decision making because ultimately the overall goal or the aim is defined by the person. There is a skill to making a good decision, and in a work context to know how to arrive at the best decision, that in itself is a whole topic in behavioural science," she said. What's next for our brains? "For our own sake, we need to nurture our brains and we need to look after our brain health," said Ms Cogan. "The best way we can do that is by remaining actively involved in that whole learning process," she said. The authors of the MIT study urged media to avoid certain vocabulary when talking about the paper and impact of generative AI on the brain. These terms included "brain scans", "LLMs make you stop thinking", "impact negatively", "brain damage" and "terrifying findings". It is very early days when it comes to learning about how these technological advances will impact on us in the long term. Maybe in the near future, AI will be able to summarise and analyse data from upcoming studies to tell us if it is rewiring our brains or making them lazy.
