If Malcolm was keen to not raise suspicion, and continue to see every email that Alice receives for the foreseeable future, then it may be that he will reconfigure her email to automatically forward future messages to an account under his control, and then send an SMS to her containing the newly reset password: Malcolm can then use the code to set a temporary password and gain control over Alice’s email account.
#How to get outlook email password verification
Please respond with the code sent to your mobile device to stop unauthorized activity.”Īlice, believing that the message to be legitimate, replies with the verification code she has just been sent by Google. “Google has detected unusual activity on your account. Rather than choosing one of the other options, Malcolm selects “Get a verification code on my phone: ” to have an SMS message containing a six digit security code sent to Alice’s mobile phone.īecause at this point, Malcolm sends Alice a text pretending to be Google, and saying something like: So instead he clicks on the “Need help?” link, normally used by legitimate users who have forgotten their passwords. But Malcolm cannot correctly enter Alice’s password of course (because he doesn’t know it). So, he visits the Gmail login page and enters Alice’s email address. However, he does know Alice’s email address and phone number. In the below example we will imagine that an attacker is attempting to hack into a Gmail account belonging to a victim called Alice.Īlice registers her mobile phone number with Gmail so that if she ever forgets her password Google will send her an SMS text message containing a rescue verification code so she can access her account.Ī bad guy – let’s call him Malcolm – is keen to break into Alice’s account, but doesn’t know her password.
For those who can’t stand the background music, here is an explanation of how you can steal an email account, just by knowing your victim’s mobile phone number.
0 kommentar(er)
