In order to get into your email account, an attacker does not need any coding or technical skills. All an attacker needs your email address in question and your cell phone number.
Here's How the Scam Works:
Send a text from an unknown number to the victim�s phone, asking them to verify their account by replying with the verification code they are about to receive in order to ensure their Google account is secure, but in real the code is a password resets code.
- Send another text message containing an unlock code to the registered phone.
- The victim receives the code with a text something like this: "This is Google. There has been unauthorized activity on your account. Please reply with your verification code.
- As soon as victim responds with the verification code, the email address is forfeited, and the attacker can log into victim�s Gmail account without detection. This social engineering trick sounds so easy and requires almost no technical skills to get into anyone�s email account.
Most of us reply to the unknown phone calls and messages thinking it is from the company, as receiving messages and phone calls from companies is not something uncommon.
Always be Defensive to such Scams
Before watching the video, someone would have never thought of such a method to hack someone�s account.
Of course, the untrained mind could easily fall victim to the text asking for a response. But, asSymantec says, "Legitimate messages from password recovery services will only tell you the verification code and will not ask you to respond in any way."
The workaround is not to fall victim for such kinds of scams and always examine the messages you receive.
SOURCE- THEHACKERNEWS