Phishing Campaign Abuses Google's Infrastructure To Bypass Defenses
KnowBe4, Wednesday, January 14th, 2026
Researchers at RavenMail warn that a major phishing campaign targeted more than 3,000 organizations last month, primarily in the manufacturing industry.
The phishing messages posed as legitimate business notifications, such as file access requests or voicemail alerts, and were designed to send users to credential-harvesting login pages.
Notably, the campaign abused legitimate Google infrastructure and links to avoid being flagged by security tools.