Overview

• Policía Cibernética monitoring by Michoacán’s Secretaría de Seguridad Pública reported more spoofing across emails, calls and messages posing as banks, companies or agencies.
• An “invisible” Gmail ploy reported by Finland’s telemarketing association uses hidden white text to trigger Gemini summaries that urge calling attacker‑controlled numbers, with Google stating it does not request passwords by phone or email.
• Fresh Microsoft/Outlook phishing waves copy official notices with subjects like “Alerta de seguridad” and “Notificación de contraseña,” or Hotmail messages titled “ASESOR,” funneling users to fake login pages and, in some cases, payment prompts.
• Security guidance repeated by authorities and experts stresses verifying senders off‑channel, avoiding links or attachments, refusing to share passwords or SMS codes, and enabling two‑factor authentication on all accounts.
• Reports note rising smishing and vishing tactics that exploit urgency keywords such as “urgente,” “premio” and “dinero,” with calls seeking tokens or codes that can let thieves drain accounts within minutes.