CoinTelegraph 2025-04-17 03:11:22

ENS founder warns of Google spoof that tricks users with a fake subpoena

The founder and lead developer of Ethereum Name Service has warned his X followers of an “extremely sophisticated” phishing attack that can impersonate Google and trick users into giving out login credentials. The phishing attack exploits Google’s infrastructure to send a fake alert to users informing them that their Google data is being shared with law enforcement due to a subpoena, ENS’ Nick Johnson said in an April 16 post to X. “It passes the DKIM signature check, and GMail displays it without any warnings - it even puts it in the same conversation as other, legitimate security alerts,” he said. The fake subpoena appears to be from a Google no-reply domain. Source: Nick Johnso n As part of the attack , users are offered the chance to view the case materials or protest by clicking a support page link, which uses Google Sites, a tool that can be used to build a website on a Google subdomain, according to Johnson. “From there, presumably, they harvest your login credentials and use them to compromise your account; I haven’t gone further to check,” he said. The Google domain name gives the impression it’s legit, but Johnson says there are still telltale signs it’s a phishing scam , such as the email being forwarded by a private email address. Scammers exploit Google systems In an April 11 report, software firm EasyDMARC explained that the phishing scam works by weaponizing Google Sites. Anyone with a Google account can create a site that looks legitimate and is hosted under a trusted Google-owned domain. They also use the Google OAuth app, where the “key trick is that you can put anything you want in the App Name field in Google,” and use a domain via Namecheap that allows them to “put no-reply@google account as From address and the reply address can be anything.” Source: Nick Johnson “Finally, they forward the message to their victims. Because DKIM only verifies the message and its headers and not the envelope, the message passes signature validation and shows up as a legitimate message in the user’s inbox — even in the same thread as legit security alerts,” Johnson said. Google deploying countermeasures soon Speaking to Cointelegraph, a Google spokesperson said they are aware of the issue and are shutting down the mechanism that attackers are using to insert the “arbitrary length text,” which will prevent the method of attack from working in the future. Related: Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles “We’re aware of this class of targeted attack from the threat actor, Rockfoils, and have been rolling out protections for the past week. These protections will soon be fully deployed, which will shut down this avenue for abuse,” the spokesperson said. “In the meantime, we encourage users to adopt two-factor authentication and passkeys, which provide strong protection against these kinds of phishing campaigns.” The spokesperson added that Google will never ask for any private account credentials — including passwords, one-time passwords or push notifications, nor call users. Magazine: Your AI ‘digital twin’ can take meetings and comfort your loved ones

La maggior parte ha letto le notizie

ECB Raises Concerns Over Potential US Regulat...
2025-04-23
5 Big Predictions for 2025: XRP, Bitcoin (Bit...
2025-04-23
Exciting Potential: Malaysia Crypto Hub Discu...
2025-04-23
AVAX could soar by 21%, but on one MAJOR cond...
2025-04-23
72 Crypto ETF Filings Await SEC Approval Amid...
2025-04-23
Cantor Fitzgerald to build $3B Bitcoin ventur...
2025-04-23
Explosive BANKEX Lawsuit Targets Matter Labs...
2025-04-23
Solana: DeFi Development’s Massive $11.5M SOL...
2025-04-23

https://www.digistore24.com/redir/325658/ceobig/

Notizie correlate

Jay Clayton’s Interim Appointment as US Attorney M...
23 Apr 2025
Former SEC Chair Jay Clayton sworn in as interim U...
23 Apr 2025
Bitcoin Miners Face Alarming Allegations of Tariff...
23 Apr 2025
Stablecoins: ECB’s Alarming Fears on US Growth Thr...
23 Apr 2025
AVAX Sees 169% Surge in Large Transactions, Sparki...
23 Apr 2025
Bitcoin Mining Game 'Miner Wars' Expands With New...
23 Apr 2025

Leggi la dichiarazione di non responsabilità : Tutti i contenuti forniti nel nostro sito Web, i siti con collegamento ipertestuale, le applicazioni associate, i forum, i blog, gli account dei social media e altre piattaforme ("Sito") sono solo per le vostre informazioni generali, procurati da fonti di terze parti. Non rilasciamo alcuna garanzia di alcun tipo in relazione al nostro contenuto, incluso ma non limitato a accuratezza e aggiornamento. Nessuna parte del contenuto che forniamo costituisce consulenza finanziaria, consulenza legale o qualsiasi altra forma di consulenza intesa per la vostra specifica dipendenza per qualsiasi scopo. Qualsiasi uso o affidamento sui nostri contenuti è esclusivamente a proprio rischio e discrezione. Devi condurre la tua ricerca, rivedere, analizzare e verificare i nostri contenuti prima di fare affidamento su di essi. Il trading è un'attività altamente rischiosa che può portare a perdite importanti, pertanto si prega di consultare il proprio consulente finanziario prima di prendere qualsiasi decisione. Nessun contenuto sul nostro sito è pensato per essere una sollecitazione o un'offerta