A new phishing scam can display what looks like a Google sign-in page if users click on attachments, which could end up sending account names and passwords to hackers.

Here's how the latest scam works: A scammer will send an email to your Gmail account. The email likely will appear to be coming from one of your contacts and ask you to look at an attached file, such as a PDF or Word document. It may appear to be legitimate since it seems to be coming from one of your contacts, but when you click on the attachment to try to preview the attachment, a new tab opens and prompts you to sign in to your Gmail account.
Learn More