Google Alerts Gmail Users of Sophisticated Phishing Scam

Gmail users are being targeted by a new wave of sophisticated phishing scams that employ convincing emails appearing to come from legitimate Google addresses, including those that pass standard verification checks. These scams, often called 'replay attacks,' typically claim recipients are subject to a legal subpoena and direct them to fake Google login pages hosted on Google Sites, where entering credentials results in account compromise. Security researchers note that the emails can bypass spam filters due to their authentic appearance and valid digital signatures. Google has acknowledged these targeted attacks, stated that it is rolling out additional protections, and strongly recommends users enable two-factor authentication and ensure recovery options are up to date. Experts emphasize the importance of vigilance, urging users to scrutinize URLs and avoid clicking links in unsolicited messages. If compromised, users have up to a week to regain account access, provided recovery information is registered.