New Phishing Scam Exploits Google Sites to Target Cryptocurrency Users

A new phishing scam uses Google Sites to deceivingly target crypto users, with emails masquerading as security alerts. Victims are directed to a convincing fake Google support page, risking exposure of sensitive information. The situation is compounded by Google’s unhelpful response to abuse reports.

Phishing scams targeting cryptocurrency users have evolved, now utilising Google’s infrastructure to launch convincing attacks. Nick Johnson, the creator of Ethereum Name Service (ENS), highlighted a new tactic that poses significant risk. The scam begins with an email mimicking an official Google security alert, which manages to bypass spam filters due to valid DKIM signatures, appearing entirely legitimate in recipients’ inboxes.