Story perspectives

Cybercriminals Misuse Google Cloud for Massive Phishing Attack

1/9/2026

Summary

Story summary

Cybercriminals exploited Google Cloud's legitimate email features to launch a phishing campaign, sending more than 9,000 deceptive emails to 3,200 organizations in North America and Europe.
They misused Google Cloud Application Integration's Send Email capability, making messages appear authentic and bypassing filters.
Victims were directed to a fake Microsoft login page after navigating Google domains.
Experts urge stronger verification and caution users to scrutinize familiar emails.

1 of 1

Story summary

Cybercriminals exploited Google Cloud's legitimate email features to launch a phishing campaign, sending more than 9,000 deceptive emails to 3,200 organizations in North America and Europe.
They misused Google Cloud Application Integration's Send Email capability, making messages appear authentic and bypassing filters.
Victims were directed to a fake Microsoft login page after navigating Google domains.
Experts urge stronger verification and caution users to scrutinize familiar emails.