Casa co-founder: Phishing emails abusing Google infrastructure

Jameson Lopp, co-founder and Chief Security Officer of the Bitcoin self-custody service provider Casa, posted on X that a new type of Google phishing technique has emerged, where attackers abuse Google's own infrastructure to send emails. He stated that if users click on the goo.gl link in the email, they will be directed to a phishing login page, and he attached relevant email screenshots in the post.

The post was published on October 29. Below the post, some users mentioned that they have reported similar situations to Google multiple times but have not received a response; other users stated that this technique is used in conjunction with calls that appear to be from Google and caller ID.