Hackers are hiding scam emails behind trusted Google tools
Scammers are sending fake work-related emails that appear more trustworthy by routing people through real Google services before leading them to harmful sign-in pages. These messages are meant to trick people into giving up work usernames and passwords, and sometimes can lead to unwanted software being installed.
Who is at risk
Anyone who uses email for work, especially employees who receive messages about shared documents, account problems, deliveries, bills, or voicemail, is at risk.
What to watch for
Watch for unexpected emails urging you to click links or sign in quickly, even if they seem to involve familiar brands or services like Google.
What to do
Do not click links in unexpected emails; instead, go directly to the company website or app yourself, and report suspicious messages to your workplace IT or email provider.