May 4, 2022
“Threat actors are always looking for the next available attack vector and reliably find creative ways to bypass security controls like spam filtering… As the research states, this attack utilized the Google SMTP relay service, but there has been a recent uptick in attackers leveraging ‘trusted’ sources.”
“Fortunately, that’s the only thing that differentiates this attack from normal phishing emails.”
“When in doubt, and you should almost always be in doubt, [people] should always use trusted paths such as going directly to the company’s website or calling the support number listed there to verify, instead of clicking links or contacting phone numbers or emails listed in the suspicious message.”Chris Clements, VP Solutions Architecture at Cerberus Sentinel
- Cybersecurity researchers have noticed an uptick in phishing emails from legitimate email addresses.
- They claim these fake messages take advantage of a flaw in a popular Google service and lax security measures by the impersonated brands.
- Keep watch for tell-tale signs of phishing, even when the email appears to be from a legitimate contact, suggest experts.
Cerberus Sentinel specializes in cybersecurity solutions that build a culture of security within an organization, enabling them to improve security, lower risk profile, optimize IT infrastructure, and meet regulatory compliance demands with extensive and comprehensive compliance review. Our Philosophy – Cybersecurity is a culture, not a product®. We believe culture is the foundation of every successful cybersecurity and compliance program. To deliver this outcome, we developed MCCP+ our holistic approach that ensures you’re secure in every area of your business. We are a publicly traded cybersecurity company listed with ticker CISO. A nationwide provider of consulting and managed services, with offices and resources across the USA, we specialize in building a culture of awareness for our clients. Founded with the belief that an acquisition approach is the best way to address the industry-wide skills gap. We are focused on cybersecurity, compliance, and the culture that drives success, acquiring world-class engineering talent who utilize the latest technology to create innovative solutions to protect even the most demanding businesses and governments against continuing and emerging threats. Article about Hackers Have Found a Way to Spoof Any Gmail Address.