Gmail bug alert: Cybersecuirty engineer discovers bug allowing spammers to bypass security look at

Google rolled out blue verified checkmark to Gmail accounts that acts as a safety commonplace, allowing prospects to tell apart between the true and phishing emails. Sadly, scammers have managed to surpass the protection look at, convincing Google that their account is precise. Chris Plummer, a security architect at Dartmouth Health has discovered a bug in Gmail to dupe Google’s authoritative stamp of approval, lastly making end prospects think about that the e-mail deal with is actual.

In a Twitter thread, Plummer writes “There is most truly a bug in Gmail being exploited by scammers to tug this off, so I submitted a bug which @google lazily closed as ‘won’t restore – supposed conduct’. How is a scammer impersonating @UPS in such a convincing methodology ‘intended’.”

There is most truly a bug in Gmail being exploited by scammers to tug this off, so I submitted a bug which @google lazily closed as “gained’t restore – supposed conduct. How is a scammer impersonating @UPS in such a convincing methodology “supposed. pic.twitter.com/soMq7KraHm

— plum (@chrisplummer) June 1, 2023

“The sender found a method to dupe @gmail’s authoritative stamp of approval, which end prospects are going to perception. This message went from a Facebook account, to a UK netblock, to O365, to me. Nothing about that’s legit. Google merely doesn’t want to deal with this report in truth,” he says.

Now, Plummer reported his discovery to Google. The tech giant, initially, dismissed his discovery as ‘intended behaviour’. But as the tweet went viral, Google acknowledged the error and said:

“After taking a closer look we realized that this indeed doesn’t seem like a generic SPF vulnerability. Thus we are reopening this and the appropriate team is taking a closer look at what is going on. We apologize again for the confusion and we understand our initial response might have been frustrating, thank you so much for pressing on for us to take a closer look at this! We’ll keep you posted with our assessment and the direction that this issue takes. Regards, Google Security Team”.

Plummer says that Google has listed the flaw as a ‘P1’ (excessive priority) restore, which is presently “in progress.”

Catch all the Technology News and Updates on Live Mint.
Download The Mint News App to get Daily Market Updates & Live Business News.

More
Less

Updated: 04 Jun 2023, 06:24 PM IST