Skip to content
logo The magazine for digital lifestyle and entertainment
CoBi Google News Security All topics
Users Must Act

Major Attack on Gmail: Billions of Email Accounts at Risk

So many apps and accounts. Forgetting a service can lead to losing access.
There is currently a large wave of attacks on Gmail accounts. Photo: Getty Images
Share article

August 20, 2025, 2:19 pm | Read time: 2 minutes

Google accounts have come under the scrutiny of a well-known hacker group. Through convincingly real phishing attacks, criminals are currently attempting to gain full control over Gmail access and connected services. Users should be especially cautious now and take important security measures.

The hacker group “ShinyHunters” has specifically compromised a Google-Salesforce database and is increasingly targeting private Gmail users. They use manipulated messages or pose as Google employees over the phone to obtain sensitive login credentials and security codes. Google confirms that password attacks have recently increased by more than 84 percent—a trend that seems to continue with the current wave of attacks on Gmail, according to “Forbes.”

High Risk from Attacks on Gmail

The attacks on Gmail have been so perfected over time that numerous users have already fallen victim. They report their experiences on Reddit, among other places. Often, the scammers claim over the phone that the Gmail account is in danger and a password reset is necessary.

Read also: Nearly 16 Million PayPal Login Credentials Have Surfaced Online

If criminals succeed in taking over a Google account through these or similar schemes, they gain extensive opportunities. In addition to accessing emails, they also gain access to Google Pay, the password manager, the Play Store, and numerous other services. Through features like “forgot password,” they can also hijack other online accounts of the victims.

These Protective Measures Users Should Take

To guard against the increasing Gmail attacks, users should take several security precautions:

  • Enable two-factor authentication for all Google services.
  • Use secure and unique passwords.
  • Do not store passwords in the browser or Google account; use an independent password manager instead.
  • Switch to passkeys if possible.
  • Regularly perform the Google security check.
  • Activate Google’s advanced security program.
  • Be suspicious of unexpected messages or calls and never share passwords or security codes.
  • Use up-to-date antivirus software.
  • Obtain software only from trusted sources and keep it updated.

This article is a machine translation of the original German version of TECHBOOK and has been reviewed for accuracy and quality by a native speaker. For feedback, please contact us at info@techbook.de.

You have successfully withdrawn your consent to the processing of personal data through tracking and advertising when using this website. You can now consent to data processing again or object to legitimate interests.