DKIM Replay Attack Bypasses DMARC via Google OAuth Phishing

DKIM Replay Attack Bypasses DMARC via Google OAuth Phishing

In the intricate world of email security, where digital signatures are meant to be the guardians of authenticity, a recent phishing campaign has exposed a glaring vulnerability in Google’s infrastructure. Attackers exploited a technique known as a DKIM replay attack to send emails that appeared to originate from Google itself, complete with valid cryptographic signatures. This allowed them to bypass spam filters and deliver a fake subpoena that …