Get the latest tech news
Gmail’s New Encrypted Messages Feature Opens a Door for Scams
Google is rolling out an end-to-end encrypted email feature for business customers, but it could spawn phishing attacks, particularly in non-Gmail inboxes.
The fear is that scammers will take advantage of this new and more secure communication mechanism by creating fake copies of these invitations that contain malicious links, and prompt targets to enter their login credentials for their email, single sign-on services, or other accounts. The fact that the organization's Workspace controls the keys rather than storing them locally on a sender and recipient's devices does mean that the feature doesn't quite qualify as end-to-end encryption in the strictest sense of the term. In fact, the new tool may offer particularly good fodder for scammers given that Google is such a trusted organization and targets may have heard about how end-to-end encryption is a special, gold standard security feature.
Or read this on Wired
