Particle.news
Get it on Google Play
Download on the App Store
6 ARTICLES
·
last yr.

Google Bolsters Gmail Security After Sophisticated Phishing Campaign Exploits DKIM Vulnerability

The attack, which mimicked official Google emails, prompts urgent calls for users to adopt passkeys and advanced two-factor authentication.

Image
Google says users still have seven days after their email is compromised to attempt to recover the account.
(Representational Image/Unsplash) Users of Gmail are facing advanced phishing attacks that evade Google's security.
Image

Overview

  • A phishing campaign exploited Gmail’s DKIM authentication, allowing attackers to send emails that appeared to be from no-reply@google.com.
  • The emails falsely claimed users were subject to subpoenas and directed them to malicious links disguised as Google support pages.
  • Google has implemented interim protections to block the DKIM vulnerability and is finalizing a permanent fix to prevent similar attacks.
  • Users are urged to enable passkeys and stronger two-factor authentication methods instead of SMS-based 2FA for enhanced security.
  • AI-driven tactics, including voice and email spoofing, are enabling increasingly convincing phishing attempts, highlighting the evolving threat landscape.