“First of all, this is a legitimate, signed email that was received from no-reply@google.com. “Gmail shows it without any warnings, and it passes the DKIM signature check,” he claimed.
A’very convincing support portal page’ was the destination of the fake link he clicked in the email. On clicking ‘Upload further papers’ and ‘View case,’ he was sent to ‘identical copies’ of the authentic.
Google sign-in page. “From there, presumably, they harvest your login credentials and use them to compromise your account; I haven’t gone further to check,” he said.
Therefore, unless you want your personal information to be collected, you may want to stay away from any dubious websites that require you to log into your account.
Malwarebytes also published four safety advice, which include checking email headers twice, avoiding unsolicited links,
Confirming the authenticity of communications, and not logging in to other websites using your Google account.