A new phishing email attack has surfaced, and these messages are somehow authenticated by Google. But how is that possible?

This particular scam has been virtually unseen for several years, but it's back now to target a new batch of victims.

Developer Nick Johnson (via X) was the target of a complex phishing attack that sees scammers send real-looking emails from ...

Crooks are abusing Google's notification system to bypass email protection Through OAuth apps, they are able to generate convincing phishing emails The campaign also uses sites.google.com ...