jymbee
Senior Member
Lately I'm getting numerous emails warning me that my Google Storage is maxed out and I need to upgrade-- or something to that effect. Checking the link destination-- storage.googleapis.com -- at first glance it looks legit but given I have zero online storage it's obviously a scan. Quick search shows what they're trying to do:
>>>>>>>>>>>>>>>>>
A storage-full notification email showing a storage.googleapis.com link is a known cloud phishing tactic. Scammers abuse legitimate Google Cloud infrastructure to host redirect scripts or landing pages that look safe at a glance, but actually push credential-stealing pages or malware.
Why This Scam Looks Real
>>>>>>>>>>>>>>>>>
A storage-full notification email showing a storage.googleapis.com link is a known cloud phishing tactic. Scammers abuse legitimate Google Cloud infrastructure to host redirect scripts or landing pages that look safe at a glance, but actually push credential-stealing pages or malware.
Why This Scam Looks Real
- Trusted Domain Abuse: The link points to storage.googleapis.com, which is a real Google-owned domain used for cloud storage buckets. Scammers create a public bucket with a random or deceptive name to host files there.
- Bypassing Suspicion: Because the domain belongs to Google and uses HTTPS with a valid lock icon, security filters and cautious users often mistake it for an official communication.
- The Redirect Trick: Clicking the link loads a file hosted on Google's legitimate storage that immediately bounces your browser to an external, malicious fake login page.

