The lead developer of ENS was hit by a phishing attack due to a Google infrastructure vulnerability that has not yet been fixed

robot
Abstract generation in progress

BlockBeats News: On April 16, nick.eth, the lead developer of ENS, posted that it had suffered an extremely sophisticated phishing attack that exploited a vulnerability in Google's infrastructure, but Google refused to fix the vulnerability. He showed that the attack email looked very real, was able to pass DKIM signature verification, was displayed normally by GMail, and was placed in the same conversation as other legitimate security warnings. The attacker used Google's "site" service to create a trusted "support portal" page, because users would see the domain name containing "google.com" and mistakenly think it was safe, so users need to be cautious.

View Original
The content is for reference only, not a solicitation or offer. No investment, tax, or legal advice provided. See Disclaimer for more risks disclosure.
  • Reward
  • Comment
  • Share
Comment
0/400
No comments