Security Alert for your linked Google Account

Phishing Example

This appears to be a message from Google to alert you of an attempt to login to a gmail account.
Note: We blurred part of the email addresses to hide the identity of the recipient.

Phishing message claiming a new sign-in to your linked gmail account
  • It looks very much like alerts you would see from Google for a new sign in to gmail, showing the phishers "did their homework" in making it appear legitimate. Remember that anyone can see and mimic this type of official message.
  • The sender's address, no-reply @ accounts.google.com, spoofs what appears to be an official Google address.  There is not an easy way to detect this.
  • Instead of clicking a link in a message, go to Google or your gmail account via a known, good website address.  Look for information there on how to see any new sign-ins to your account.
  • Right-clicking or hovering over a link in the message shows more information and may let you know whether the link is for a known site.  If you see a link beginning with https:// urldefense.proofpoint.com... this is CUIMC's Targeted Attack Protection (TAP), which automatically rewrites or redirects links in incoming messages.  It ensures that clicking on a link will first go through the security filter to detect malicious web pages. Since phishing and malware messages evolve constantly, TAP does not always immediately know of new malicious sites and you should still use caution when clicking links in a message.