3 ms·
...so? It's still a phishing vector. Teaching users that sometimes Google throws together half-assed domains encourages them to trust any domain with "google"
by scarmig 8y ago
...so?
It's still a phishing vector. Teaching users that sometimes Google throws together half-assed domains encourages them to trust any domain with "google" in it.
- scarmig 8y agoJust for example, the following domains are all available: workingoogle.com labsgoogle.com labsatgoogle.com learngoogle.org learnatgoogle.com youatgoogle.com bygoogle.co securitywithgoogle.com mailatgoogle.com realgoogle.com etc.
- bduerst 8y agoAFAIK they don't have any pages there that allow account login, for that and other security reasons.
- owaty 8y agoYes, but: > Create a name and email — neither need to be real — to make this quiz seem more realistic. Don’t worry, this information won’t leave your device. I'd trust this notice if I knew it came from Google, but since it was placed on a phishy-looking website, it really gave me pause.
- zulln 8y agohttps://www.google.com/search?q=site%3Awithgoogle.com+login https://www.google.com/search?q=site%3Awithgoogle.com+login
- scarmig 8y agoThat doesn't help the situation much, even if it were true. If a phisher creates a fake Google domain, how many users will go, "Aha! I was about to login using my Google credentials, but then I remembered Google only asks users to login to *.google.com domains, so I know this is an attempted phish!"