Google Primary Emails can Hack your Account! See How!

Amazingly, as the title explains, I am talking about Google Primary Emails Scams and Hacks! Well, it is obvious that viruses in the past and even now are transferred through emails too. But as the time is passing Google is adding more security features in its all products. But, we aren't sure if the attacker is more security breaker than a common layman! Anyways, lets talk on an incident happened to me today's morning. 

Back End Story of the Scammer with Me!
Some days back, I got an email from a person with this information

  • Email Sender:             crdc ekm
  • Email:                         shoeworlds@gmail.com
  • Email Sender Profile:  Lee Aril - Phisher's Account. 
  • Here is the Email Sending Specifications by Google: 

from:crdc ekm shoeworlds@gmail.com
reply-to:shoeworlds@gmail.com
to:
bcc:my-email-on-which-it-sent-me-in-bcc@gmail.com
date:Thu, Jul 9, 2015 at 6:41 PM
subject:Purchase
mailed-by:gmail.com
signed-by:gmail.com
  • This senseless man's first message to me was: i want to purchase your items 
  • I thought he is someone who have got that email from my one website and is willing to purchase some services as I do sell some services. I, in my working mind, did not noticed that I sell services not items! And so on my things which should be considered! Anyways, seeing the email in my Primary Emails, I thought it to be as my genuine customer which I should NOT leave to reply later!
  • So, I replied to him: Sure, tell the name of item you want to buy!
  • A few days later, means today! I got a response with header Team instead of crdc ekm but with same email from him as it is as quoted below.

Hello
Sorry for my late response, i received your mail and its contents are well noted, in acknowledgement of your inquiries kindly view my requirement also the items i need.
We sincerely hope to develop a good business relationship with you.
Regards

  •  He attached the file referring view my requirement also the items i need! 
  • So, I checked the file as if I am insane! And I got Google Account Phishing Page as Landing!
  • He tried to SCAM me! But, unfortunately, this is not in his luck!!! 
  • Moreover, his coding was enough weak enough to let me know that this is Scam Page. 
  • Another reason to observe is: Google NEVER asks to sign in even again for anything from within the Attached file in some Google Mail!
  • Secondly, there is nothing to be expected to sign in when a customer wants to purchase something. S/he should have mentioned the item directly if s/he is serious enough! Anyways, see this Scam Page.

My Observations on Google Primary Email Scam!
  • Google do NOT check for Scam Pages within Attached Files. Google do NOT secure accounts if you are willing to break the security for your account by yourself! Google do NOT detect the Phishing Pages and Hacks Properly!
  • I checked the source code of this page and checked where the SIGN IN action sends information. The information was being sent to http://westuae.com/mail_verification/connect_msql_database_gmail.php file instead of Google's platform. 

  • I checked the website westuae and found the poorly coded website database opened as below.

  • I checked all of them and amazingly! I got many other Scams from that idiot person that he have made to do with innocent people! You can check the files present there. You'll find DHL Phishing Page,  Yahoo Phishing Page, Google Mail Account Phishing Page, Update your Email Address Password Phishing Page and so on! 
Final Words on Account Hacking!
In this age of hacking and cracking, we all should be aware of such precautions that enhances the care for hacks and scams while using any kind of online account and so on in our real life too. People can be smart but they should not be smarter than you by anyway. If you are using online resources then, use them in a professional manner by learning everything about that resource. Mandatory measures should be taken against such people by laws and authorities but people at their own level should also be taking proper care while roaming on this internet. 
I hope, my all readers are now able to check the source code of such pages in the files to know where the information is being sent. Moreover, if you want to know more about such pages then do ask me in comments or share your such incident with us so that more people can be kept safe from liars and scammers.

DO NOT forget to share this with your friends and mates, you care for!




0 responses :

Post a Comment