Casa Co-founder Warns of New Phishing Attack: Using Google Recovery Forms to Hide Malicious Links

Odaily Planet Daily News: Casa co-founder Jameson Lopp has warned that a new type of phishing attack is emerging, where attackers use legitimate Google recovery forms to hide malicious links within large amounts of blank content. This technique embeds "invisible" or overlooked whitespace characters within long texts, making malicious links difficult for users to detect, thereby tricking them into clicking and leaking account information.

Lopp reminds users to remain vigilant when dealing with account recovery emails or forms, and to avoid clicking on links with unclear origins or those that are deliberately hidden. (Cointelegraph)