Gmail Phishing Campaign Targeting Businesses

A new phishing campaign is targeting business users through fake Gmail security alert emails. These messages claim that suspicious activity has been detected on the user’s account and urge them to click a link to secure their account immediately. The link directs users to a fraudulent login page that closely resembles the official Gmail login screen. Once credentials are entered, attackers capture the username and password and gain access to the victim’s email account. This access can then be used for further phishing attacks, data theft, or business email compromise.