Scammers use Gmail dot alias trick to spoof Robinhood in phishing scam

Visiting the fake login website alone isn’t enough for hackers to gain entry to accounts. However, entering sensitive information such as passwords could grant them access.

Robinhood users are being warned about a new phishing attack that takes advantage of Gmail’s native “dot alias” feature and flaws in Robinhood’s account creation process to send malicious emails.  

Robinhood users on Sunday began reporting on social media of emails originating from the platform’s mail server warning of an unrecognized device login, which linked to phishing websites in the “call to action” button.

Read more