Google has issued a serious warning to its 2.5 billion Gmail users, urging them to strengthen account security amid rising hacking attempts. The tech giant is strongly recommending users change their passwords and enable two-step verification (2SV) to reduce the risk of breaches.

Who is behind these cyberattacks?

According to a report by Silive, the hacking group known as ShinyHunters, which reportedly takes its name from the Pokémon franchise, has been linked to several high-profile cyber incidents since 2020. The group has been tied to breaches at major organisations, including AT&T, Microsoft, Santander and Ticketmaster.

Their methods often involve phishing attacks, where unsuspecting users are tricked into entering login credentials or sharing verification codes on fraudulent websites.

What kind of data could be at risk?

Although much of the stolen data so far has consisted of publicly available information, Google has warned that such breaches could become more targeted and harmful.

In a blog update published in June, Google stated, “We believe threat actors using the ‘ShinyHunters’ brand may be preparing to escalate their extortion tactics by launching a data leak site (DLS).”

This suggests that while the immediate risks might appear limited, future attacks could lead to large-scale leaks and blackmail attempts.

How has Google responded to the threat?

On August 8, Google notified users who may have been impacted, advising them to immediately review and tighten their account security settings.

The company highlighted the importance of two-step verification (2SV), also known as two-factor authentication (2FA) or multi-factor authentication (MFA). This process requires a second layer of confirmation, such as a code sent to a mobile device, before access is granted.

By enabling 2SV, even if attackers manage to steal a password, they would still be unable to gain entry without the additional verification.