Gmail Dot Alias Exploit Powers Robinhood Phishing Scam That Delivers Authentic-Looking Security Emails To Real Inbox
Hackers used Gmail’s dot handling trick and a flaw in Robinhood’s account setup to send fake login alert emails that looked real. The emails came from Robinhood’s own system and tricked some users into clicking phishing links and entering sensitive details on fake websites.
Weatherly