![\"\"](\"https:\/\/www.rushlimbaugh.com\/wp-content\/uploads\/2017\/03\/650-031517-Google-Phishing-3.jpg\")
<\/p>\nRUSH: I just was made aware of a new phishing attack that is the best I\u2019ve seen, meaning it\u2019s gonna snare lots of unsuspecting people.<\/p>\n
First off, if you use Gmail, you are the target. However, it only will affect you if you access your Gmail on a web browser. If you do Gmail inside an email app — say on your phone or on your computer or on an iPad — you\u2019re okay. But if you use Chrome or Safari or Firefox or any other browser to access your Gmail account, now you gotta pay attention. And here\u2019s what happens.<\/p>\n
You\u2019re in your Gmail account, and you get an email, and it has an attachment that looks like a PDF file or a Word document that\u2019s attached to it. And it\u2019s not from somebody you know, but it\u2019s in your inbox, and it\u2019ll have an intriguing subject line to make you want to open it. If you open the attachment… Here comes the Dittocam. If you open the attachment, which is a PDF file, or a Word document, this is what you\u2019re gonna see. I\u2019m holding up a Google login page. And this looks identical. It is scary how exact a replica this is.<\/p>\n
This is not what you\u2019ll see when you see the email. You\u2019ll have to open the attachment. That\u2019s… In every phishing scheme, there\u2019s either a link or an attachment you have to click on. And if you don\u2019t recognize who the email is from, then ignore this. But if you don\u2019t, I just want to tell you what happens. If you click on the attachment that looks like a PDF file or a Word file, you\u2019re gonna get this Google login page. And you\u2019re gonna think, “Wow. Okay. I guess I have to re-login to get this attachment.”<\/p>\n
You\u2019re not gonna think anything\u2019s weird so you\u2019ll log in again even though you think you\u2019re auto logged in. It looks just like the Google login page. One account, all of Google. If you fall for this, whoever these hackers are will have your Google login credentials — and whatever you use them for, this hacker will be able to get in and use. Now, I have not advised Koko… I just found this right before the break at the top of the hour, so I printed this out. I\u2019ll send this up to Koko so he can reproduce this and actually make it understandable here on a page at RushLimbaugh.com. When I get time here, I\u2019ll do it.<\/p>\n
<\/p>\n
I\u2019m still holding it because that looks exactly like any Google login page I\u2019ve ever seen. Now, folks, understand: If you use Gmail on your web browser, this is how you\u2019re affected. It impacts you. Keep in mind, you\u2019re already logged in. If you\u2019re able to download messages, you\u2019re already logged in again. You don\u2019t have to log in again. But if you hit on the attachment that looks like something you want to read, it takes you that login page, and the idea is that you\u2019ll fall for it by thinking, “Oh, maybe I have to re-log in to read the attachment.” Don\u2019t do it. If you do, you will see that it\u2019s not going to Google server because the address of the hacker does not begin with http.<\/p>\n
![](\"https:\/\/www.rushlimbaugh.com\/wp-content\/uploads\/2017\/03\/650-031517-Google-Phishing-300x144.jpg\")
And if it doesn\u2019t begin with http, then it\u2019s not a Google server or any other authorized server. It\u2019s some other entity that you don\u2019t want to mess with. This page that I just showed you that looks identical to the Google login page is not hosted by Google. It\u2019s a re-creation that steals your login credentials as you input a user name and password. And then those credentials that you\u2019ve just given away there are used to gain access to your Gmail account and then further the scam and access whatever they can with your Google.<\/p>\n
If you log in to Facebook with your login, whatever you log in with, you\u2019re sunk. And I had an opportunity — since we were talking about these things yesterday — to say, “Here\u2019s what I can use to actually show you how it works.” I will be unaffected because I do not use Gmail and I do not access my email on a web server. But if you do, I just wanted to let you know. Now, again, here\u2019s another thing. Don\u2019t answer an email you get from your employer asking you to share your tax and payroll information.<\/p>\n
If you get an email from your boss, and the boss wants you to share your tax ID number, your Social Security, your payroll information, before you reply, check with your boss and make sure this is legit, because that\u2019s another email scam that is continuing to fool people into thinking the company that you work for needs your Social Security number.<\/p>\n
And the way this works again is psychological. You work for the XYZ Widget company, and you get an email, and it says, “We need your social.” And you don\u2019t stop to think, “Wait a minute, you already got it.” You think maybe they lost it, maybe they are updating it. So you give it. Don\u2019t do it. Never, ever give up any of these things to entities that you don\u2019t know, or that you in your right mind would not expect to be asking for it.<\/p>\n
Now, this scam asking for tax and payroll information, it continues to fool just enough people to keep the con going. Now, there\u2019s another way that you can protect yourself on this stuff, and that\u2019s with LifeLock<\/a>. Now, despite my evidence, despite every effort I\u2019ve made here to help people, some are still gonna fall for this. Now, if they\u2019re LifeLock account members they have even more added protection, because their computers are constantly being scanned — well, their transactions are being scanned.<\/p>\n If they spot some irregularity, they\u2019ll call you, they\u2019ll email you to alert you to a possible violation of your privacy. If it turns out to be bad news, somebody did get in, then you are introduced to the LifeLock Restoration Unit<\/a>, which works exclusively to put you back together, so to speak. Now, no one company can insure you from every form of identity theft, but LifeLock is the best.<\/p>\n![](\"https:\/\/www.rushlimbaugh.com\/wp-content\/uploads\/2017\/03\/Lifelocklogo.jpg\")
<\/a>As a LifeLock member your online activity is anonymously scanned, and they establish a pattern looking for abnormalities. If an abnormality is found, that\u2019s when you hear from LifeLock<\/a>. You hope to never hear from them, but if somebody\u2019s hacked you and if somebody\u2019s gotten hold of your personal data and can use it to replicate you, pretend to be you, that can cost you money. That\u2019s where LifeLock steps in and tries to stop it.<\/p>\n