How are scammers exploiting Gmail’s blue verified checkmark?
Companies and organizations can verify their identity on Gmail using various systems such as Brand Indicators for Message Identification (BIMI), Domain-based Message Authentication, Reporting, and Conformance (DMARC) and Verified Mark Certificate (VMC). These systems help with brand identification, message authentication, reporting, and conformance. If a company successfully completes the verification process to confirm its identity, Gmail will show its company logo and a blue checkmark beside its name.
However, cybersecurity engineer Chris Plummer has observed that scammers have discovered a method to bypass Google’s security measures. This allows them to create messages that appear to come from a legitimate source, making it difficult to detect fraudulent activity.
The cybersecurity expert reported this situation to Google, only to have his bug report closed with the explanation that it was “intended behaviour”. Later, the expert expressed his frustration on Twitter after finding the response unsatisfactory. The public’s reaction on social media was negative towards his statement, leading Google to reconsider its initial dismissal due to the significant response.
It should be noted that Gmail introduced a blue checkmark feature similar to Twitter’s to assist users in identifying emails from verified brands and distinguishing them from spam accounts. This move is expected to aid in the reduction of phishing attempts.
Stay connected with us on social media platform for instant update click here to join our Twitter, & Facebook
We are now on Telegram. Click here to join our channel (@TechiUpdate) and stay updated with the latest Technology headlines.
For all the latest Technology News Click Here
