Dangerous phishing campaign exploits Google OAuth and DKIM replay to spoof emails from Google

Apr 25, 2025 · 4 min read · Overview Recently, FPT Threat Intelligence has recorded a sophisticated phishing campaign carried out by hackers on a large scale. The attackers exploit Google OAuth and the DomainKeys Identified Mail (DKIM) mechanism to send fake emails with valid s...