Pretty clever.

Pretty clever. How do you fool people into clicking on your GMail change password phishing link by making it look like a legitimate Google link? Why, that’s simple: get Google to steal your brand by using AMP. In the process of subsuming your web presence they hide all your links behind a legitimate looking Google link shortening service.

4 thoughts on “Pretty clever.

  1. I think the phishing email is surprisingly crappy for a supposedly high end attack. I know it worked on some people, but that doesn’t surprise me either. Some people can’t walk and chew gum at the same time.

    Like

Leave a comment