ENS developer nick eth was hit by a highly camouflaged phishing attack related to a Google vulnerability

WuSaidBlockchainW · 2025-04-16T12:09:28+00:00

The core ENS developers were subjected to a phishing attack that exploited a vulnerability in Google's infrastructure, successfully bypassing authentication and pretending to be a Google Security Alert email to lure users into logging in and stealing information. Attackers build fake support pages, and Google doesn't fix the vulnerability, making this attack a common occurrence.

WuSaidBlockchainW

2025-04-16 12:09:28

Abstract generation in progress

Wu learned that ENS core developer nick eth suffered a highly sophisticated phishing attack that exploited two unfixed vulnerabilities in Google’s infrastructure to bypass DKIM verification and pass a Gmail security warning, disguised as a real Google Security Alert email. Attackers use Google Sites to build fake “support pages” to trick users into logging in and steal credentials. Nick ETH said that he had reported the issue to Google, but was replied that it “works as expected”, and Google refused to fix the logic vulnerability, which could be frequent in the future.

ENS-6.83%

ETH-2.62%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.