Gmail users at risk with ‘replay attack’ scam in Ontario

A new phishing scam is reportedly targeting Gmail users with emails that appear to come from a legitimate Google address, claiming a subpoena has been issued and directing recipients to fake sign-in pages.

The scam, known as a “replay attack,” is an email designed to mimic the appearance of a real security alert. It claims that a legal request has been made for the user’s account data, includes a reference number and account ID, and directs the recipient to a Google Sites page to “review case materials” or “submit a protest.”

The email appears to be sent from [email protected] and passes verification checks, making it more convincing to users and capable of bypassing spam filters.

Clicking the provided link reportedly takes users to a fraudulent site that closely resembles a legitimate Google login page. Entering information there may result in compromised usernames, passwords and other sensitive credentials.

The Canadian Anti-Fraud Centre warns that phishing emails like this are often used to steal login credentials, banking information, or Social Insurance Numbers. Individuals are urged to avoid clicking links in unsolicited emails and to block the sender.

Anyone who believes they have been targeted by a scam should contact their local police service or the Canadian Anti-Fraud Centre at 1-888-495-8501.

Photo via X (formerly Twitter) posted by user @nicksdjohnson