Gmail is a hugely popular email service, with over 2.5 billion users. So when rumors start to swirl about Gmail problems, people pay attention. On Monday, Google made an unusual statement, formally denying that it had issued a broad warning about a major Gmail security issue.
"Gmail's protections are strong and effective, and claims of a major Gmail security warning are false," the post read. "While it's always the case that phishers are looking for ways to infiltrate inboxes, our protections continue to block more than 99.9% of phishing and malware attempts from reaching users."
It's a bit odd that Google had to deny sending a warning. As a Gmail user, I didn't see any major security warning, even though news outlets reported on it.
Salesforce data was affected in June
Perhaps Gmail users were confusing the nonexistent warning with another one.
Back in June, Google posted a blog entry about how its Threat Intelligence group is tracking hackers who are impersonating IT support personnel over the phone. The hackers' goal is to trick employees into sharing their credentials so they can steal a company's Salesforce data. (Salesforce is a cloud-based platform that helps businesses manage their customer interactions.)
On Aug. 5, the post was updated to note that one of Google's own corporate Salesforce instances was affected by this kind of activity.
"Analysis revealed that data was retrieved by the threat actor during a small window of time before the access was cut off," the post read. "The data retrieved by the threat actor was confined to basic and largely publicly available business information, such as business names and contact details."
Emails were sent to those affected by this incident on Aug. 8, so if you didn't receive one, your data wasn't affected.
In late July, Google also posted a warning about the acceleration of phishing attacks and offered some tips on how to protect yourself.
... continue reading