TL;DR: A new phishing campaign is targeting Google Workspace users. The campaign uses a fake Google Workspace login page to steal users' credentials. Google has released a security bulletin to warn users about the phishing campaign. To protect yourself from the phishing campaign, you should be suspicious of any email that asks you to click on a link or enter your username and password. You should also enable two-factor authentication for your Google Workspace account.

A new phishing campaign is targeting Google Workspace users. The campaign uses a fake Google Workspace login page to steal users' credentials. The phishing campaign has been seen targeting a variety of organizations, including government agencies, educational institutions, and businesses.

The phishing emails typically contain a link to a fake Google Workspace login page. The fake login page looks very similar to the real Google Workspace login page. However, the fake login page is actually a phishing site that is designed to steal users' credentials.

If a user enters their username and password into the fake login page, the attacker will be able to steal the user's credentials. The attacker can then use the stolen credentials to access the user's Google Workspace account.

The attacker can use the user's Google Workspace account to steal sensitive data, such as emails, documents, and spreadsheets. The attacker can also use the user's Google Workspace account to send phishing emails to other users.

Google has released a security bulletin to warn users about the phishing campaign. Google has also provided instructions on how to protect yourself from the phishing campaign.

To protect yourself from the phishing campaign, you should:

• Be suspicious of any email that asks you to click on a link or enter your username and password.
• Do not click on links in emails from senders that you do not recognize.
• Instead, go directly to the website of the company that the email claims to be from.
• If you are unsure whether an email is legitimate, you can contact the company directly to verify.
• You should also enable two-factor authentication for your Google Workspace account. Two-factor authentication adds an extra layer of security to your account by requiring you to enter a code from your phone in addition to your password.

If you think you may have been a victim of the phishing campaign, you should:

• Change your Google Workspace password immediately.
• You should also contact Google support to report the incident.

Google is working to investigate the phishing campaign and to protect users from further attacks.