I think I have just been caught by this. Logged in to Google mail and the screen showed my usual log-ins on clicking the boxes, as normal.

The screen then changed to “Google Security Screen” with a box with my mobile number in it, all looks normal so continued. Clicked and was sent a verification code to my mobile only from a number +6750753768 which looks like somewhere in China. Nothing else appeared in my Gmail account and I didnt enter the verification code…

Immediately changed the Gmail password. Logged in again and it told me the password had been changed an hour ago… very dodgy. It also knocked out Norton AV as well.

Feel free to shut this down if it is all legit… or confirm its a scam…

Currently using a mac and Safari so it think I’m not passing anything on !

HTH

Do you have Two Set Verification set up with your Gmail account?

If not I don’t think you should ever receive a code to your mobile.

Worth clicking on the “Last Account Activity Details” in gmail (bottom right), just to be sure.

Best to do this from a totally clean login, not via wifi, on a different machine (eg via phone or something), just in case there’s a vuln on the mac/pc, router, or you’re the victim of a man-in-the-middle attack.