Google warns Gmail users to change passwords and enable 2‑FA

Google has warned Gmail users to update their passwords and enable two‑factor authentication after a wave of phishing attacks targeting email credentials.

• The advisory cites the “ShinyHunters” group distributing extortion emails with fake login prompts from domains like shinycorp@tuta.com and shinygroup@tuta.com.
• Security researchers reported a separate breach that exposed roughly 184 million passwords in a public database, many tied to major email and social‑media services.
• Users should check the “Recent security activity” section in the Security tab of myaccount.google.com for any unfamiliar sign‑ins within the past 28 days.
• To change a password, go to Security → “How you sign in to Google” → Password, verify the current password, and set a new, strong password that hasn’t been used before.
• To enable 2‑step verification, select “Turn on 2‑Step Verification” in the Security tab and follow prompts to use an authenticator app, security key, text code, or backup codes.

Why it matters: Unaddressed compromised credentials can give attackers access to personal data and further abuse of Google services.

Read more: https://getnews.me/google-warns-gmail-users-to-change-passwords-and-enable-2-fa/