Researchers have discovered that threat actors are targeting users by leveraging Google’s cloud infrastructure to infect them with malware, according to Cyware. In these campaigns, threat actors utilize the Google Cloud infrastructure service to conduct phishing by attaching Google firebase storage URLs in phishing emails. Most of the themes for the lures include payment invoices, account verifications, upgrading email accounts, change-password emails, and much more. Once the targets click on the Firebase link, they land on a supposed login page and are required to enter their credentials, which are shared with the cybercriminals.

Experts Comments

June 02, 2020
Jake Moore
Cybersecurity Specialist
ESET
Phishing scams are still very common, but particularly clever attempts are increasing and can deceive even those who are aware of them. In the moment, reading something which mounts pressure on you to verify or give up information can easily make you trip up and overlook a scam. You simply cannot trust all emails, no matter what the body of the message says. Verifying authentic emails has never been more important, and remains your best bet in beating the fraudsters. Companies that don't.....Read More
Phishing scams are still very common, but particularly clever attempts are increasing and can deceive even those who are aware of them. In the moment, reading something which mounts pressure on you to verify or give up information can easily make you trip up and overlook a scam. You simply cannot trust all emails, no matter what the body of the message says. Verifying authentic emails has never been more important, and remains your best bet in beating the fraudsters. Companies that don't have the proper security procedures in place can often leave themselves and their customers vulnerable to a social engineering attack, but constant delivery of training is vital to make people aware of the problem and raise a zero-trust policy. If you have fallen for a scam like this, it’s a race against the clock to reverse the damage caused, by calling the bank or changing all those passwords recently divulged.  Read Less
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.
Be part of our growing Information Security Expert Community (1000+), please register here.