Listen Up...

Okay, today just a very short post. This is really a reply to some seriously stupid people - and yes, there are seriously stupid people out there in the vast world of the internet.

This little gem (below) I received today, in my gmail box:

First thing - I've never heard of "Google Account Alert" (who it is supposedly "from")

Second thing - "mailnorewly(at)gmail(dot)com" is not my address (though it insists it was sent to mailnorewly, is not even close to my address, and is spelled incorrectly anyway.

Heads up to the phishers out there - if you can't spell even a simple word like "reply" don't waste your time.

Third thing - nobody in their right mind would ever even try to reply such a dumb, stupid email.


Please people, if you're going to try and phish something out of me, you better learn to spell, and get way more creative than this.


For the rest of you, my readers - I am pretty sure none of YOU are going to even blink as you reach for the "spam" button in your gmail account, right?

Just about the only good thing I can say about this email is that it tickled my funny bone for about one-tenth of a second. It actually got a smile out of me,.

Hey folks - it's Friday. Have a great weekend...

Important Reminder for AdSense & AdWords Users!

A while ago I wrote an article about protecting yourself and your AdSense account from phishing attemps. Well today, I want to remind AdSense publishers NOT to click on any email link unless they are absolutely certain the email has come from AdSense or Google, and never REPLY to any of these type of messages with personal information.

The other day I received an email which wound up in my spam box; the email indicated it was from "Google Team" - this was the first red flag for me. Emails to me from Google or Adsense have not ever come from "Google Team".

When looking at the "Re" line of the mail, the word "your" was misspelled "yuor google Account". This was the second red  flag. The third red flag was all the spelling errors in the body of the email, and then there was the fact that this email expected me to reply with:

My User Name
My Login Password
My Current Country

No contact I have received from Google, Gmail or AdSense has ever asked me my current country - they are in fact already aware of this information. Had I requested an address or change of country from them directly, I would expect that question, but not in an unsolicited email.

This email also indicates that I need to "update to a fully supported browser". My browser(s) are supported, and are already updated, and updating my browser would have nothing to do with my account unless I were having problems accessing it...which I don't.  I also don't use the Chrome browser, and it is not listed under my services and products in my Google account.

Finally, when checking the email headers, the sender address and the email reply address are not at all related to AdSense, or Google.

Anybody who responded to an email such as this one would soon find all of their accounts associated with their Google account compromised - this includes Gmail, AdSense, AdWords, Blogger and any other Google product and service you use under that particular Google Account.


Emails such as this are the reason people sometimes find themselves unable to access their AdSense, AdWords or Blogger accounts.

Be very careful before you give out any information such as your User Name, Login Password and other personal details. Never, ever give this in an email you are not sure about. If you receive an email and you don't know or aren't sure if it came from Google or AdSense, then use the help forums and ask someone to confirm it's validity.

You'll note...the date on that email was Saturday, August 10th. Here it  is Thursday Sept. 2nd...and my accounts are perfectly fine without having completed this "validation" and my gmail account hasn't been deleted, either.

UPDATE!! 

DO NOT FALL FOR THIS!

Well, it appears that the above noted "phishing expidition" just wasn't enough for some folks. I guess they weren't all that happy with my decision to ignore them.

This morning (Saturday, Sept. 11 - an interesting date choice for this) I received yet another of these mails. The text of the mail is below:

from    newsdatainfogoogleaccount@gmail.com
to  
date    Sat, Sep 11, 2010 at 5:27 AM
subject    Final Warning
mailed-by    gmail.com
signed-by    gmail.com
  

Our technology & science team has recently launched Google web software to protect and secure all Gmail Accounts. This system also enhanced efficient networking and fully supported browser. You need to upgrade to a fully supported browser by filling out the details below for validation purpose and to confirm your details on the new webmaster Central system.

Account Name:                        

Password:

Country:

Note: Your Account will be deleted permanently if you failed to provide the details below within 72hours. Gmail will not be heard responsible for your negligence.
 

The Google web Service. 

Just to be clear - Google did NOT send this if you received one. GMail did NOT send this. Nobody associated with Google sent this - IGNORE it. Mark it as spam and DO NOT give these people ANY of your information.

Phishing for AdSense - or How Not to Get Hacked

In recent weeks I have noticed an increase in spam email coming into my mail accounts. In particular, these emails are purported to be from:

AdSense
AdWords
Blogger
Google

To date, none of them have actually been from any of those places, except the most recent one. They have been from spammers and scammers who hope someone will click a link in the email. Once clicked, the link will take a person to a page that is most likely set up to resemble a real page from any of those places, however, any sign in information you enter will be captured and used by the scammer.

How Will a Spammer/Scammer/Phisher Use My Information

If you use AdSense, they'll have the information to login to your AdSense account and redirect your earnings to themselves, or the information close out your account, or to do anything you can do in your AdSense account.

If you use Blogger, they'll have access to all your blogs. This means they can edit or change them, including putting their own adsense codes on your blog and removing yours. Most likely they are hoping your blogger login information is the same as your AdSense login. And it probably is.

With the Google account they can login to any service you use under Google.

What To Do When You Get An Email From any Google Source

The first thing you should do - don't panic. These guys often send emails saying your AdSense account has been disabled, and telling you to click the link to have it restored. The same sort of email is also used for Blogger accounts. Whatever you do, don't click any links in an email, even if you think it's from AdSense. Find out first who it's really from.

AdSense may indeed send you an email that your account is disabled, if it really is. And they do contain links, but usually the link leads only to a page on the AdSense Help Center.

The next thing you should do is check the header information. If you use gmail for your login you can show the header information by opening the email.

If you use the newer version of gmail, there is a link near the top and off to the right a little that says "show details".

When you click that, gmail will display the information in the email headers.


Check the information in the "From" and "Reply To" fields, as well as the "mailed by" and "signed-by" fields.

If you are still not certain, go the help forum and ask for help deciphering whether or not it's "really" from AdSense or Google or Blogger. Be sure to use the appropriate forum - if the email says it's from Blogger, use the Blogger help forum, if it says it's from AdSense, use the AdSense help forum.

When you are unsure - under no circumstances should you click any link in the email.

You can check the link by using the google safe browsing diagnostic page for the link. You do that by typing this string in the search bar and appending it with the page named in the link below - the link below is using the url for the blog you are reading now:

http://www.google.com/safebrowsing/diagnostic?site=http://helpfulinformationfornewbies.blogspot.com/

Change the part in red to the page url in the email link.

The linked page in the email used in the example above can be seen below:

http://www.google.com/safebrowsing/diagnostic?site=http//:www.google.com/adplanner

This tool will tell you whether or not the site is hosting any malware or has been seen in the past to hold any malware.

Other things you can do are to copy the link from your email and enter it into your browser search bar. This will take you to the page that the link goes to, where you can see the information on the page.

Look at the page carefully and note it's location displayed in the browser. In the case of the email I used as an example, the browser displays the following URL ("x" replaces the real information to protect the innocent):

You can see that this URL goes to a secure google accounts login page for the Google Ad Planner.

If you are still uncomfortable about clicking anything on this page, then leave the page and navigate on your own to your Google Accounts page the way you normally would. Click on the service link from your own Google Accounts page (for wherever the email is from - Blogger or AdSense) and login from there.

Take Charge of Your Own Security

Never click links in an email without first ensuring it's security.
Use safe browsing ad-ons or plug-ins to avoid phishing or malware sites.
Use pop-up blockers to prevent scam ads from showing.
Read and investigate things before you sign up or click any links.


Places You can Find Help with Security Issues

"What The Tech Forums" - trustworthy and helpful with useful free software listings

"Safer Networking Forums" - also trustworthy will some excellent free software on site

"Google Search Help" - helpful information in their Help Center for safe surfing & browsing.