Google's email spoofed by cunning phisherfolk

Google Responds to Report of Sophisticated Gmail Phishing Attack

Google on April 22 said it is aware of reports of a phishing scam targeting Gmail account holders and has rolled out a fix. Earlier this month, a software developer and researcher wrote that he received a security alert email that purported to be from Google that informed him that a “subpoena was served on Google LLC requiring us to produce a copy of your Google Account content,” adding later that the user could look into the details to “submit …

Google's email spoofed by cunning phisherfolk

Infosec In Brief: PLUS: Malware developers adopt Node.js; US disinformation warriors disbanded; Gig worker accounts for sale; and more

Phishers abuse Google OAuth to spoof Google in DKIM replay attack

In a rather clever attack, hackers leveraged a weakness that allowed them to send a fake email that seemed delivered from Google's systems, passing all verifications but pointing to a fraudulent page that collected logins.

Recently, Gmail users have received fake emails from Google with the title "Security Warning" and many people have fallen into the trap.

On the occasion of the recent phishing campaign via Gmail, comments by Melissa Bischoping, Head of Security Research at Tanium. "This recent phishing attack exploits Google's legitimate features to send specially designed emails that bypass some traditional checks, and uses Google Sites to host falsified pages and collect identifiers. The email used an OAuth application combined with an ingenious DKIM bypass solution to circumvent the types of s…

If you receive an email or a security alert sent by GOOGLE, be very careful. The phishing scam has improved your tactics, now thieves are getting you tech and mind to trick and pass the Gmail security filters. The serious thing is that many are falling into the trap without realizing it, because the emails are well structured in content and appearance, so the user believes they were sent by Google's own security center. What's the Trick?: To sup…