Security researcher Slawomir Grzonkowski is warning of a simple – yet clever – spear-phishing scam that is targeting Gmail, Yahoo and Hotmail users in an effort to trick them into letting an attacker take over their accounts.
The attack method leverages the availability of password recovery features offered by most email providers that allow a user to have a verification code sent to their mobile phone in the event they forget their email account password.
