05/30/2026
Don't fall for this clever trap! Hackers are using fake Google Security pages to trick users into installing malicious web apps that bypass multi-factor authentication and steal passwords. Make sure your team knows how to spot this scam!
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time passcodes, harvesting cryptocurrency wallet addresses, and proxying attacker traffic through victims' browsers.