Developer Nick Johnson (via X) was the target of a complex phishing attack that sees scammers send real-looking emails from ...

He's calling on Google to disable scripts and arbitrary embeds in Sites as it's "too powerful a phishing vector." The email itself, meanwhile, which takes advantage of Google OAuth and Google's ...

A developer reported the scam after noticing a slight discrepancy in the email address. The scam passed Google’s own DKIM ...