Attackers Use Old YouTube Feature in Phishing Attack to Send Messages from Legitimate Email

A new phishing campaign using a YouTube feature that helps attackers send emails
from a valid email has been making the rounds. Google is already investigating
the issue, and our telemetry shows the phishing campaign is live.

Spam filters can quickly determine if an email is part of a phishing campaign,
and one way to do that is by looking at the email address that sent the message.
While a spoofed address might trick a user by looking like a real one, the
server won’t make the same mistake.

N