Here is how it works.
You get a mail with an image or an attachment.
When you click it; you will be redirected to a login page that looks exactly like Google.
Here all your login data will be stolen and can be reused.
So to avoid this:
Do not log in on any page that pops up when you click an image or attachment!
On the status bar you will see accounts.google.com prefixed by :
Code: Select all
data:text/html
If this is the case dont go any further!
If you do; then your mails will be accessible to the hacker and they can pretend to be you!
Another way of avoiding this is to use the two step verification, but this requires you to give your phone number to Google and they do not respect your privacy all that much. I will not give it to Google.
but the procedure will prevent this phishing attempt. more here
