فاس نيوز ميديا جريدة الكترونية جهوية تعنى بشؤون و أخبار جهة فاس مكناس – متجددة على مدار الساعة
Rabat, Morocco – In an urgent security alert, the Moroccan Directorate General of Information Systems Security, through its specialized center (maCERT), announced a large-scale data breach that targeted the information of hundreds of millions of Google account users worldwide.
In an official statement, the directorate explained that a hacking group known as “ShinyHunters” gained access to an internal Google database via the “Salesforce” system. This allowed them to steal sensitive user information.
Details of the Breach and Stolen Data
According to the statement, the stolen data did not include passwords but did contain important personal information such as customer names, company names, and phone numbers. The directorate warned that this data could be used to launch precise and focused phishing attacks, where users receive fraudulent emails or phone calls from hackers impersonating Google employees with the goal of deception.
The directorate confirmed that some “Gmail” users have already received fraudulent calls and messages claiming a security breach on their accounts, which poses a direct threat to the security of their personal data.
Precautionary Advice for Users
In light of this threat, the maCERT center urged all Google account users to exercise extreme caution. The Directorate General of Information Systems Security provided several key recommendations:
- Be Vigilant and Cautious: Do not respond to any suspicious emails or phone calls claiming to be from Google and asking for personal information.
- Enable Multi-Factor Authentication (2FA): This step is an additional line of defense, as it requires more than one method of identity verification, making the hacking process more difficult even if a password is stolen.
- Monitor Security Notifications: It is crucial to review any alerts or notifications from Google regarding unusual activity on your account.
The directorate emphasizes the importance of these measures to protect personal data and avoid falling victim to the fraudulent attacks that may result from this breach.
