The latest google phishing scam tries to steal your login credentials and those of your contacts.

It is hard to tell it is a phishing scam because the header has “https://accounts.google.com/ServiceLogin?service=mail” in the middle of the URL. The trick is that the URL is preceded with the "Data;text" string.

If you have fallen for this scam, you need to immediately change your password. If you use the same password on other secure sites, you should change them also.

The second thing to do is set up two factor authorization. That way a code is sent to your phone and only you will have it.

The third thing to do is mass email your contacts and let them know you were hacked and to ignore any emails that purport to come from you especially if they contain an attachment.

This may be old hat to many of you, but it is worth repeating to remind users to stay vigilant.

Source: Make Tech Easier