Google Faces Major Phishing Threat Targeting Users with Legitimate Emails

A sophisticated phishing scam is targeting Google users by sending emails that appear to originate from official Google addresses and pass Gmail’s security checks, including DKIM verification. These emails, which often claim to be legal notifications or security alerts, direct recipients to convincing fake support pages hosted on Google’s own Sites platform, making the scam difficult to detect. Once on these pages, victims are prompted to enter login credentials or upload sensitive documents, potentially compromising their accounts—especially if linked to cryptocurrency services. The attack exploits Google Sites’ flexibility, allowing scammers to create pages with custom scripts and embeddings that mimic real Google interfaces. Despite being reported by developer Nick Johnson, Google initially responded that the behavior was 'as expected,' though the company later confirmed it is rolling out new protections and is aware of the threat group involved. Experts warn users to remain vigilant and verify URLs, as even legitimate-seeming messages may be fraudulent.