Attackers Use Multi-Hop Google Redirects for Phishing Campaign
At a glance
- Severity
- Low
- Used in attacks
- No flaws named
- Vendors and products
- Reported by
- 1 outlet
Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-09-08 21:03 UTC
Related stories
- Fintech platform Sageworks taken offline after suspected cyberattack
BleepingComputer · 2026-11-02
- ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
The Hacker News · 2026-11-02
- Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers
The Record · 2026-11-02
- 2nd November – Threat Intelligence Report
Check Point Research · 2026-11-02
- Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
SANS Internet Storm Center · 2026-11-02