Accessibility links
  • Skip to main content
News Icon NEWS FILTER
All News Scams & Phishing Security Education Videos Mobile Security Your Security Education Identity Theft Corporate Security
Search Icon SEARCH
 

Email Icon SUBSCRIBE TO WEEKLY NEWSLETTER
Invisible Ink, Visible Risk: Researchers Reveal Hidden Fake Warnings in Gmail Summaries
Facebook   X   LinkedIn   Email

Invisible Ink, Visible Risk: Researchers Reveal Hidden Fake Warnings in Gmail Summaries

December 22, 2025

Think Gmail’s new AI summarizer is a handy time-saver? Sure, being able to summarize your emails might sound like a great idea, but it also might be a scammer’s dream. Mozilla’s 0din research team discovered a nasty trick targeting Google’s recent upgrade. Here’s the deal: attackers can hide secret instructions inside an email—stuff you’ll never see, but Gmail’s AI will.

When you click “Summarize this email,” Gemini reads hidden commands that were inserted by scammer. Suddenly, the summary shows a warning: “Your account is compromised! Call this number now!” Well, it might look official, and you might initially believe it, but hold your horses, Cowboys. It’s a trap, and that number connects you to scammers ready to clean out your bank account.

Why is this so dangerous? Because most people trust summaries. After all, it's just giving you the TL:DR version of the information and making it more efficient for you. In addition, most people will trust Google. You think it’s coming from Google, so you believe it and act fast; leaving you exactly where the attackers want you to be.

Here’s how to look out for yourself:

  • Trust, but verify urgent warnings in AI summaries, especially about passwords or security alerts.
  • Check the original email before acting. If you can’t see the warning message in the original message, that’s a big red flag.
  • Never call phone numbers or click links from summaries. Go directly to your account through official channels.

AI tools can be very helpful for a vast number of things. However, in the wrong hands, they become another weapon against us. Stay on top of current warnings and cybersecurity news so you don’t become another victim of AI cybercrime. 


Gmail Tech Support Exposes New Threats From AI

Your Security

Gmail Tech Support Exposes New Threats From AI

A significant cybersecurity breach involving Gmail raised alarms across the tech community late in 2024. Hackers leveraged advanced AI techniques to create a sophisticated scheme involving account recovery phishing emails that were nearly indistinguishable from legitimate communications. And, to make it even more believable, they were followed up with a phone call from a “Gmail tech support person,” throwing everyone a phishing curveball. READ FULL STORY

New Clickjack Attacks: Where You Double-Click Matters

Scams & Phishing

New Clickjack Attacks: Where You Double-Click Matters

Call them sneaky, devious, underhanded, cunning, and conniving. Clickjack attacks are all that and more. And now there’s a new twist on this highly successful cybercrime. All it takes is one wrong double-click that puts this crime into motion, leaving countless victims unaware they’ve been duped. That is, until it’s too late. Here’s what you need to know now about this new type of attack on your clicks. This new double-click version gets past clickjacking protections put on the single click attacks. READ FULL STORY

Critical Malware Threat Targets Gmail and Outlook

Your Security

Critical Malware Threat Targets Gmail and Outlook

Recently, a critical email threat targeting Gmail and Outlook users has come to light. Security researchers have identified malware campaigns distributing VIP Keylogger and 0bj3ctivityStealer threats, which can compromise these users. They are designed to steal PII and other information by gathering keystrokes and taking screenshots. HP Wolf Security is warning of a malware threat that hides inside images that are delivered to the inboxes of Gmail and Outlook users. READ FULL STORY

Yep. You Read That Right—16 Billion Records Exposed

Identity Theft

Yep. You Read That Right—16 Billion Records Exposed

On June 18, 2025, cybersecurity outlet Cybernews revealed a colossal compilation of 16 billion login credentials leaked online, making it one of the largest data exposures in history. This massive treasure trove, distributed across 30 separate datasets, includes usernames, passwords, session tokens, and metadata such as URLs—likely harvested via infostealer malware from infected machines. The leak isn’t tied to a single platform breach, but spans a wide array of services. It's likely you use one or more of them. READ FULL STORY

The Onion Effect-One Malicious Zip File Hides Multiple Layers of Zip Files

Scams & Phishing

The Onion Effect-One Malicious Zip File Hides Multiple Layers of Zip Files

Once again, hackers have found a sneaky way of hiding malware most of us would never expect. An attacker sending a phishing email with a malicious Zip file attached isn’t unusual. But this newly discovered Zip file hides multiple Zip files like layers of an onion, and one of those files holds malware. This way, the malware bypasses anti-malware detection. Opening the Zip shows a directory of what’s included in the file, but no other directories appear showing the hidden Zip files. As a result, it’s impossible to see or expect there are other Zip files inside. READ FULL STORY








Close
Fraud News & Alerts!

Keep up with the latest cyber security news through our weekly Fraud News & Alerts updates. Each week you will receive an email containing the latest cyber security news, tips and breach notifications.



You're all set!

You will receive your first official security update email within the next week.

A welcome email has also just been sent to you. If you do not receive this email within the next few minutes, please check your Junk box or spam filter to confirm our emails are not being blocked.


 
Help  
Enter any word or words you like.        

The email newsletter will arrive from news@stickleyonsecurity.com


Loading
Please wait...