Cyber criminals have found a new way to send spam and phishing emails that allow them to bypass email scanners. They are using Google Ad invites for their email delivery. Administrator of Google Ads accounts can add new users to their account by sending out invites. These invites are sent from Google and hence are regarded as a legitimate and trusted email sender. The cyber criminals have been creating Google ad accounts and using the send invites functionality to deliver their spam and phishing emails. Those legitimate emails from Google would contain malicious links from the cyber criminals. Those links would redirect users to dodgy websites pushing adult dating sites, with many appearing to be designed to collect personal information from visitors.
This segment was created for the It’s 5:05 podcast