IT staff warns county of convincing ‘Google subpoena’ email spoof
Loading...
Summary
An IT staff member told the Washington County Information Technology Committee that a new, convincing phishing email purports to be a Google subpoena and may harvest credentials; staff recommended avoiding links and will circulate details by email.
An IT staff member at the Washington County Information Technology Committee warned members on April 22 that a highly convincing email spoof that appears to come from Google is circulating and may be harvesting credentials.
The warning matters because the message is designed to look like an official Google alert and reportedly passes common spam filters, the staff member said. "It's a different kind of a spoof where they're saying that they have a subpoena for your information, and it comes in with all your other alerts," the staff member said. "Don't click on any links . . . go to the site on your own. Log in, but avoid links and emails if you can because this has been proven to be a credential harvester."
The staff member said the discovery was recent and that the county cybersecurity officer may send an explanatory email to all county accounts with technical details. Committee members asked whether the county's cybersecurity posture was holding; the staff member responded that ongoing training appears to be helping: "I think our training is doing a good job on that."
Committee members and staff discussed practical steps: treat suspicious messages skeptically, avoid clicking links in email, and use direct site logins instead. The staff member said they did not yet know the specific exploit technique used and had not completed a technical investigation.
The committee did not take a formal vote on the item. The cybersecurity advisory was recorded as committee business and staff committed to circulating further guidance by email.
