The GTFire phishing scheme leverages Google services like Firebase and Google Sites to host malicious content, evading traditional domain-based detection. The article does not provide a CVSS score, specific affected or fixed software versions, or a direct workaround. Security teams should focus on enhancing detection for phishing campaigns that abuse legitimate cloud platforms.
2026-02-26 (Back to Inventory) GTFire Phishing Scheme: Avoiding Detection Using Google Services Author(s): Hans Figueroa , Vlada Govorova Organization: Group-IB Open article directly Related Articles 2025-08-27 â‹… Group-IB â‹… Nikita Rostovcev , Sergei Turner ShadowSilk: A Cross-Border Binary Union for Data Exfiltration Cobalt Strike YoroTrooper 2025-03-13 â‹… Group-IB â‹… Group-IB ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims Emmenhtal Lumma Stealer 2025-02-20 â‹… Group-IB â‹… Dmitrii Yankelevich , Dmitry Pisarev , Pavel Naumov Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters ScreamedJungle