Phishers exploit Google’s SMTP Relay service to deliver spoofed emails

Phishers are exploiting a flaw in Google’s SMTP relay service to send malicious emails spoofing popular brands. Avanan researcher Jeremy Fuchs says that starting in April 2022, they have seen a massive uptick of these SMTP relay service exploit attacks in the wild, as threat actors use this service to spoof other Gmail tenants. SMTP relay exploit takes advantage of DMARC unenforcement Google’s SMTP relay service is used by organizations for things like sending out … Continue reading Phishers exploit Google’s SMTP Relay service to deliver spoofed emails