A new phishing scam is reportedly targeting Gmail users with emails that appear to come from a legitimate Google address, claiming a subpoena has been issued and directing recipients to fake sign-in pages.
The scam, known as a “replay attack,” is an email designed to mimic the appearance of a real security alert. It claims that a legal request has been made for the user’s account data, includes a reference number and account ID, and directs the recipient to a Google Sites page to “review case materials” or “submit a protest.”
The email appears to be sent from [email protected] and passes verification checks, making it more convincing to users and capable of bypassing spam filters.
Clicking the provided link reportedly takes users to a fraudulent site that closely resembles a legitimate Google login page. Entering information there may result in compromised usernames, passwords and other sensitive credentials.
The Canadian Anti-Fraud Centre warns that phishing emails like this are …