Scam Details Unveiled
Hackers exploited Google's infrastructure to send deceptive emails, tricking users into revealing login credentials by mimicking legitimate Google addresses and passing DKIM checks.
The phishing scam involved emails claiming users were served subpoenas, directing them to a counterfeit Google Support page to harvest credentials.
Google's Response and User Recommendations
Google confirmed the attack, closed the loophole, and urged users to adopt two-factor authentication and passkeys for stronger protection against phishing.
Google emphasized that it never asks for account credentials via email or phone and advised users to manually verify the authenticity of emails.