A sophisticated phishing campaign has recently emerged, leveraging Google Cloud’s trusted infrastructure to host malicious redirects. The campaign’s technical structure leverages Google Cloud Storage legitimate domain, googleapis.com, which is widely trusted by mail gateways and end users alike. This provides the attackers an opportunity to bypass common security layers such as SPF and DKIM validation. […]

The post Phishing Campaign Uses Google Cloud to Host Malicious Redirects via GCS Bucket appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.