Cyber Security News Aggregator
.Cyber Tzar
provide acyber security risk management
platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.
First slide label
Some representative placeholder content for the first slide.
Second slide label
Some representative placeholder content for the second slide.
Third slide label
Some representative placeholder content for the third slide.
Phishing Lures Utilizing a Single Google Cloud Storage Bucket
published on 2026-03-03 18:44:04 UTC by /u/anuraggawandeContent:
I have documented a campaign consisting of more 25 distinct phishing variants that all converge on a single Google Cloud Storage (GCS) infrastructure point.
Core Infrastructure:
- Primary Host: storage/.googleapis/.com
- Bucket/Object: /whilewait/comessuccess.html
Analysis Highlights:
Evasion Strategy: The campaign utilizes the inherent trust of the googleapis/.com domain to bypass SPF/DKIM-based reputation filters and secure email gateways (SEGs).
Lure Variance: Social engineering hooks include Scareware (Storage Full/Threat Detected), Retail Rewards (Lowe's/T-Mobile), and Lifestyle/Medical lures.
Redirect Logic: The comessuccess.html file serves as a centralized gatekeeper, redirecting traffic to secondary domains designed for Credit Card (CC) harvesting via fraudulent subscriptions.
[link] [comments]
https://www.reddit.com/r/netsec/comments/1rjxne1/phishing_lures_utilizing_a_single_google_cloud/
Published: 2026 03 03 18:44:04
Received: 2026 03 03 19:26:31
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Views: 5
