Subscribe NOW

Text Message our CEO:

650-283-8008

Free Resources

Click Here to learn more

The Google Phish from Google?

by Larry Chiang on April 16, 2025

⁦‪@nicksdjohnson‬⁩

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google’s infrastructure, and given their refusal to fix it, we’re likely to see it a lot more. Here’s the email I got: pic.x.com/tScmxj3um6

4/16/25, 4:32 AM

⁦‪@nicksdjohnson‬⁩

The first thing to note is that this is a valid, signed email – it really was sent from no-reply@google.com. It passes the DKIM signature check, and GMail displays it without any warnings – it even puts it in the same conversation as other, legitimate security alerts. pic.x.com/GxlFR6ccLG

4/16/25, 4:32 AM

The first thing to note is that this is a valid, signed email – it really was sent from no-reply@google.com. It passes the DKIM signature check, and GMail displays it without any warnings – it even puts it in the same conversation as other, legitimate security alerts

Leave a Comment

Previous post: collateralized music festival loan obligations (and Big Short Jokes GALORE)

Next post: You’re Only Larry Oriental YOLO

Register Get a $45 Rebate
Larry Chiang on Facebook
Email*
sign up for the Newsletter subscribe to the RSS Feed follow Larry on Twitter
About Duck9

Duck9 is a credit score prep program that is like a Kaplan or Princeton Review test preparation service. We don't teach beating the SAT, but we do get you to a higher credit FICO score using secret methods that have gotten us on TV, Congress and newspaper articles. Say hi or check out some of our free resources before you pay for a thing. You can also text the CEO: 650-283-8008
Awesome Brands