Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials.

Attackers have successfully impersonated Google by exploiting DKIM replay, using valid signatures on fake subpoena emails ...