Gmail threat report

A large-scale phishing campaign is abusing Google's legitimate services including Meet, Search, DoubleClick, and Analytics as trusted redirect networks to bypass email security controls, deliver highly personalized credential-harvesting pages, and deploy ScreenConnect remote-access software. Attacks target organizations in manufacturing, government, finance, and non-profit sectors using DocuSign, Microsoft, FedEx, and QuickBooks impersonation. URL hash fragments encode victim email addresses to evade server-side logging and sandboxes.

• Global Phishing Campaign Abuses Google Infrastructure to Evade S(opens in a new tab)