Phishing Gmail Messages
A phished or spoofed Google or Gmail e-mail message has only one purpose: stealing your personal or financial information. The sender will ask you to provide your login credentials, password or other personal information such as your social security number, mother’s maiden name, birthday, PIN code or birth location. When they have the information they need, the attacker will try to login as you and steal your money or identity.
Below is an example of a phishing Gmail message:
From: Gmail Security Team firstname.lastname@example.org
Subject: Secure Your Gmail Account
We have initiated verification on your email address.
Verifying your email address ensures that you can securely retrieve your account information if your password is lost or stolen. You must verify your email address before you can use it on Gmail services that require an email address.
To complete verification, click on the link below:
CLICK HERE TO SECURE YOUR GMAIL
For your security, please keep your email address information up-to-date.
© 2010 Google. All Rights Reserved
The email is not from Google or the Gmail Security Team but from phishers. The link as per Graham Cluley of Sophos will display a fake Gmail login webpage.