News for hackers. Stuff that matters.
Re:Google spoofed via DKIM replay attack: A technical breakdown by moongoose on Friday July 25, 2025 @03:35AM (#44680598)
The screenshot looks too real, something is off. Anything hosted on Google Sites has a huge Cookie Banner and an (i)-Info Icon to report abuse.

I guess they edited the screenshot.

Re:Google spoofed via DKIM replay attack: A technical breakdown by sksrbWgbfK on Friday July 25, 2025 @03:54AM (#44680750)
They may have changed the screenshots but I confirm that I received the same kind of email. Same technique and email from Google, the only difference was that it had some spam at the bottom of the email.
Re:Google spoofed via DKIM replay attack: A technical breakdown by jeroenhd on Friday July 25, 2025 @05:00AM (#44681132)
I wouldn't call the banner huge, at least not in the examples I've found at [1]. The cookie banner doesn't look out of the ordinary and hides when you start scrolling.

[1]: https://www.reddit.com/r/GoogleSites/comments/1ffz1a5/google... ; see websites like https://www.woofiepie.me/ https://www.manuelfally.com/home https://www.wedding-whisperer.com/

Re:Google spoofed via DKIM replay attack: A technical breakdown by onehair on Friday July 25, 2025 @07:22AM (#44681937)
I came here to say the opposite.

Is this the screenshot you're mentioning? https://easydmarc.com/blog/wp-content/webp-express/webp-imag...

If I received an email from google with text formatted like this. I would automatically have doubts it's anythig genuine.

While Gmail isn't anything to boast about UI wise. Google often have good enough an consistent UI patterns where this screenshot looks like there was no thought put into it past slapping a google logo on top.