<story><title>Be warned, there&apos;s a nasty Google 2 factor auth attack going around</title><url>https://twitter.com/maccaw/status/739232334541524992</url></story><parent_chain></parent_chain><comment><author>ams6110</author><text>So the scam is, attacker knows your gmail address and your phone number. They send you the text message about suspicous activity on your account. Then they attempt to reset the password on your gmail account. That triggers Google to send you the code. You reply to the attacker&amp;#x27;s message with the code as instructed, and they own your account.</text></comment>
<story><title>Be warned, there&apos;s a nasty Google 2 factor auth attack going around</title><url>https://twitter.com/maccaw/status/739232334541524992</url></story><parent_chain></parent_chain><comment><author>JohnTHaller</author><text>This isn&amp;#x27;t a 2 factor attack.  It&amp;#x27;s a social engineering Google account password reset attack.  The attacking party is resetting your Google password and asking you to provide the code Google sends your registered mobile number via text to them.</text></comment>