google-logo (http://www NULL.rj-diamond NULL.com/alex/wp-content/uploads/2010/01/googlelogo NULL.jpg) After the widespread Gmail outage yesterday users were hit by a phishing attack over the Gtalk chat client. "The malicious message spread via the Google Talk instant messaging chat system (http://www NULL.sophos NULL.com/blogs/gc/g/2009/02/25/gmail-users-hit-viddyho), urging users to a video by clicking on a link connected via the TinyURL service.

gtalk-viddyho (http://www NULL.rj-diamond NULL.com/alex/wp-content/uploads/2010/01/gtalkviddyho NULL.jpg)

The link points to a website called ViddyHo, which invited users to submit their Gmail usernames and passwords."

viddyho (http://www NULL.rj-diamond NULL.com/alex/wp-content/uploads/2010/01/viddyho NULL.jpg)

     When users entered their credentials the information would be logged and the email account would be compromised. If you think you may have been subjected to this attack it is advised you change your password immediately. The attack was not immediately picked up by Google either because it did not use conventional means. By using the Gtalk client it bypassed the Gmail filters completely.

(*Story information and pictures from http://www.sophos.com/blogs/gc/g/2009/02/25/gmail-users-hit-viddyho (http://www NULL.sophos NULL.com/blogs/gc/g/2009/02/25/gmail-users-hit-viddyho))