Google is urging most of Gmail's 2.5 billion users to update their passwords and strengthen account security after a series of "successful intrusions" by hackers, the New York Post reports.
The company advises users to be especially vigilant for suspicious activity and to set up additional security methods, including two-factor authentication, if they are not already activated.
Hackers most often gain access to accounts through phishing emails with fake login pages or by spoofing two-factor authentication codes. While most users have strong and unique passwords, only a third update them regularly.
Google is advising users to increase security after a breach of its Salesforce database, which mainly stole public data, including contacts from small and medium-sized businesses. According to Google, the ShinyHunters group, known since 2020 for high-profile hacks (AT&T, Microsoft, Santander, Ticketmaster), may be preparing new attacks and blackmailing victims by launching a data-draining website.
Google notes that the new attack methods are aimed at increasing pressure on victims, including those affected by the recent Salesforce incidents.
Google has sent an email to all users affected by the latest attack. The company urges users to regularly check account activity, avoid suspicious links, and report any suspicious activity.