Google has issued a warning confirming that a “sophisticated” phishing attack might find its way into users’ Gmail accounts. The scam was first reported by developer Nick Johnson, who noted the email appears to come from a legitimate Google address. “The only hint it’s a phish is that it’s hosted on sites.google.com instead of accounts.google.com,” Johnson noted. However, the email, which states the user has been served a subpoena, does appear convincing. “We’re aware of this class of targeted attack from this threat actor and have rolled out protections to shut down this avenue for abuse,” a Google spokesperson said. In the meantime, users are encouraged to adopt two-factor authentication and passkeys. (dailymail.co.uk)

Phone Topic: Are you good at detecting scams?