Sophisticated Google Email Phishing Attack Exploits Security Measures
Google has rolled out fixes to stop an “extremely sophisticated phishing attack” that exploited its infrastructure to send fake emails. The attack, described as a DKIM replay attack, allowed threat actors to create a valid-looking email signed from [email protected] and redirect recipients to fraudulent sites harvesting their credentials. The attackers leveraged Google Sites, a legacy … Read more