- Google has addressed recent claims of great vulnerability in Gmail
- The company denies these claims, says they are “completely false”
- Certain accounts of Google’s work space were committed to recent Drift Sales attacks
Recent reports of an important security problem that affect Gmail are “completely false,” said Google.
In a blog post, the company said it wanted to assure its users that Gmail’s protections are “strong and effective.”
“Recently several inaccurate statements arose that incorrectly declared that we issued a broad warning to all Gmail users about an important Gmail security problem. This is completely false,” says the announcement.
Work space commitment
Although Google did not explicitly mention what he states that he was addressing, some of his services had been linked to the recent drift attack of Salesloft.
The Salesloft income workflow platform recently suffered a cyber attack that saw threat actors enter a third party and steal confidential information.
The company is using Drift, a conversation marketing and sales platform that uses live chat, chatbots and IA, to involve visitors in real time, along with its own sales veil, a third party platform that links the functionality of chat of Drift with Salesforce, synchronizing conversations, potential customers and cases, in the CRM through the CRM sales.
As of August 8, and lasting about ten days, the adversaries managed to steal Oauth and refresh the Salesdrift tokens, turn to the client environments and successfully exfiltrating confidential data.
Later, Google warned that certain accounts of the work space, as well as the Salesforce instances, may also have been compromised during the attack. This led some reports misunderstanding that he promised Gmail, which, as Google now confirmed, is not the case.
“While it is always the case that Phishers look for ways to infiltrate the entrance trays, our protections continue to block more than 99.9% of phishing and malware attempts to reach users,” Google added.
“Security is such an important element for all companies, all customers, all users: we take this work incredibly serious. Our teams invest a lot, constantly innovate and clearly communicate about the risks and protections we have instead. It is crucial that the conversation in this space is precise and objective.”
