**Update, Feb. 1, 2025**: This article has been revised to include new advice for identifying deepfake AI threats, a statement on a sophisticated Gmail attack from Google, and insights from a content security expert. Hackers are adopting new tactics, including using avatars in attacks and persistent 2FA-bypass schemes targeting Google users. This alarming trend reveals that a malicious AI is actively seeking Gmail credentials. Forbes reports a recent victim describing an advanced phishing scheme where a Google caller ID impersonated a support technician, leading them through a convincing sequence of emails and prompts to reset their account. Fortunately, Zach Latta, the founder of Hack Club and nearly a victim, recognized the AI-driven deception before falling prey to it. The ongoing threat underlines the necessity for Gmail's 2. 5 billion users to remain vigilant, as cybercriminals continuously refine their methods. According to Spencer Starkey of SonicWall, enterprises must adopt adaptable cybersecurity strategies, emphasizing the importance of regular threat assessments and incident response plans. To mitigate these sophisticated AI attacks, users must approach unsolicited communications cautiously.

For anyone contacted by supposed Google support, it’s best to hang up, as these calls are scams. Check phone numbers through official Google channels and review recent account activity via the Gmail interface to ensure no unauthorized access has occurred. One crucial protective measure is Google’s Advanced Protection Program, designed for high-risk users like journalists and politicians but accessible to anyone. This program requires a passkey or hardware security key for sign-ins, ensuring that even if a criminal acquires your username and password, they cannot access your account without your physical device. Additionally, the Advanced Protection Program restricts access to your data, allowing only Google and verified third-party apps with your consent, enhancing your account's security. Google has taken action against relevant scam accounts and continues to bolster defenses against such exploitative tactics.