Google-Domains missbrauchen Hacker, um Phishing-Links vor E-Mail-Gateways zu verstecken

Phishing attacks are nothing new, but attackers keep finding smarter ways to stay one step ahead of security tools. The latest campaign doing the rounds is a stark reminder that trust, especially the kind organizations place in big-name tech platforms, can be turned into a weapon.

Hackers are now hiding malicious links inside a chain of legitimate Google services, making it nearly impossible for automated email security systems to catch them before they land in someone’s inbox. The campaign works domains inside a single link. When security tools scan the email, all they see are familiar, reputable Google addresses.

The hidden destination, the actual phishing page, stays completely out of sight until a real person clicks the link. That single gap between what a machine sees and what a human experiences is exactly what attackers are counting on. Researchers at KnowBe4 ThreatLabs said in a report shared with