Google Email Phishing Attack Leveraging DKIM Signatures

April 22, 2025, 4:20 am

A sophisticated phishing campaign has tricked email systems by reusing valid DKIM signatures on fake subpoena emails that managed to sneak past DMARC checks. Cybersecurity experts are left wondering if this clever hack is a wake‐up call or just another case of email security taking an unintended coffee break.

betanews.com / Email still the main channel for cyberattacks and disinformation

winbuzzer.com / Google Email Systems Spoofed by Phishing Campaign Reusing Valid DKIM Signatures

theregister.com / Google's email spoofed by cunning phisherfolk who re-used DKIM creds

permalink / 3 stories from 3 sources in 8 hours ago #cybersecurity #infosec #google #email-security #ai +