Google’s Threat Intelligence Group (GTIG) said it first discovered a breach in June and, by August, became aware of bad actors using “overlapping tactics, techniques, and procedures” to access networks and accounts. Those tactics include social engineering, such as impersonating IT support reps in phone conversations, primarily targeting English-speaking users at multinational companies.
GTIG said the data obtained was “basic and largely publicly available business information” but warned that ShinyHunters “may be preparing to escalate their extortion tactics by launching a data leak site … likely intended to increase pressure on victims.”
In the past, GTIG tracked the group’s actions for months after branches and found their extortion techniques included “calls or emails to employees of the victim organization demanding payment in bitcoin within 72 hours.” The hacker group takes its name from the Pokémon franchise.
Geekspin noted that ShinyHunters has previously hacked the organizations AT&T Wireless, Mashable, Microsoft, Santander, Ticketmaster and Wattpad. Along with extorting their victims, the group also sells stolen databases on the dark web, adding further risk to anyone’s accounts.
How to protect your Google account now
To keep your Google account as secure as possible, the company advises taking several steps.
Start by updating your password and making it unique to your Google account. As AllThingsSecured.com notes, using the same password across multiple accounts — such as email, banking or social media — means if a hacker gains access to one, they can access them all. The site recommends using a trusted password manager to both create and store strong passwords.
Google also advises enabling two-factor authentication along with a security key or Google Prompt. Both add an extra layer of protection by requiring you to approve a login even if a hacker has your password.
The company recommends updating related Google and Android apps, browsers and operating systems to ensure you have the latest and most secure versions.
Be wary of suspicious messages by email, text, from websites or even phone calls. Google warns that hackers may pretend to be institutions, family members or colleagues to steal sensitive information.
