Control government-backed attack alerts in G Suite

We’re adding a feature in the Admin console that can alert admins if we believe a user’s account has been targeted by a government-backed attack. If an admin chooses to turn the feature on, an email alert (to admins) is triggered when we believe a government-backed attacker has likely attempted to access a user’s account or computer through phishing, malware, or another method. It does not necessarily mean that the account has been compromised or that there was a widespread attack on an organization.

Admins can turn the feature on and off, choose to share information about the alert with others, and help secure the user’s account. Specifically admins can:


  • Turn alerts on or off. 
    • By default, no alerts will be sent. Admins can choose to turn these on in the Admin Console > Reports > Manage Alerts > Government backed attack. 
  • Set up default notifications for these alerts. 
    •  Admins can decide who gets notified when attacks are suspected. When the feature is first turned on, the default setting is for alerts to be sent by email to super admins of the G Suite domain. To change this, go to the Admin console > Reports > Manage Alerts > Government backed attack. 
  • Choose actions to take on individual alerts. 
    • Secure the account: Admins may want to take actions to secure the account. 
    • Alert the user: Admins may want to let the user know about the alert and any actions they have taken.      


Admin console settings for Government-backed attack warnings


Launch Details 
Release track:
Launching to both Rapid Release and Scheduled Release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (up to 15 days for feature visibility)

Impact:
Admins only

Action:
Admin action suggested/FYI

More Information 
Google Security blog: Reassuring our users about government-backed attack warnings
Help Center: Fix or stop government-backed attack alerts
Help Center: Administrator email alerts


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates