2017 — Google: Recently, many people received a phishing email…
Data compromised
Personal information
Technical writeup
Recently, many people received a phishing email from a mailinator.com address that was attached to a malicious Google doc. It seemed to be targeting journalists, as well as yours truly.Once the link is clicked, a user is directed to the Google login page, asking for a username and password.Except, the page is not as it seems. The page IS hosted (or was hosted) in Google’s infrastructure of servers, and utilized SSL, making it appear that the user was logging into an actual Google associated web
Root cause
Hacking