From PC Mag: Phishing emails are becoming increasingly difficult to differentiate from legitimate ones, as highlighted by developer Nick Johnson, who says he was "targeted by an extremely sophisticated phishing attack [that] exploits a vulnerability in Google's infrastructure."
The email he received came from no-reply@accounts.google.com, which "passes the DKIM [DomainKeys Identified Mail] signature check," he notes. Gmail did not display any warning, and "even puts it in the same conversation as other, legitimate security alerts."
View: Full Article