Crypto Phishing Scammers Exploit Google Infrastructure
Nick Johnson highlights a significant crypto phishing scam leveraging Google’s infrastructure, exposing vulnerabilities and sparking community concerns.
- Nick Johnson alerts Google about crypto phishing scam.
- Initial market unease but no price impact.
- Google claims operation as intended, crypto community frustrated.
Nick Johnson, founder of Ethereum Name Service, flagged a crypto phishing scam exploiting Google’s infrastructure on April 16, 2025, highlighting potential security vulnerabilities.
Phishing Scams and their Impact
The phishing scam operating through Google Sites has posed a serious security threat by integrating OAuth infrastructure with phishing vectors. Nick Johnson criticized Google for not addressing the issue as a serious security concern, highlighting the phishing potential.
“Google long ago realised that hosting public, user-specified content on google.com is a bad idea, but Google Sites has stuck around. IMO they need to disable scrips and arbitrary embeds in Sites; this is too powerful a phishing vector.” — Nick Johnson
Despite Johnson’s efforts to escalate the matter with a bug report, Google’s team remarked that the infrastructure was working as intended. This highlights a potential disconnect in perceived security threats and corporate responses from major Internet platforms.
The immediate impact on the crypto market remains minimal in terms of price changes, yet the community is increasingly alarmed about using such public platforms. Community reactions have voiced strong criticism towards Google’s approach to these kinds of security incidents.
Historically, phishing in the crypto industry has resulted in substantial annual losses, affecting retail users and increasing overall market anxiety. Users are encouraged to fortify personal security measures, as regulatory actions have yet to surface.
Phishing risks in Web3 environments might prompt tightened security protocols and improved regulatory frameworks in the long term. Such incidents underline the necessity for comprehensive cybersecurity measures within the cryptocurrency sector, especially related to trusted Internet platforms.
More From Crypto News
Why Is Algorand (ALGO) Price Down Today? Key Factors
Algorand (ALGO) is trading at $0.099536 on October 29, 2026, down 3.88% over the past 24 hours, slipping below the psychologically significant $0.10 level as se...
South Korean Regulators Inspect Bithumb After Employee Data Exposure Signs
Bithumb disclosed signs pointing to a possible exposure of employee data, prompting regulators to move to direct on-site review, per CryptoSlate reporting .
Sports Made Up 98.2% of Polymarket US Turnover in 30 Days: DeFi Rate
Sports contracts accounted for 98. 2% of Polymarket US turnover over a 30-day window, according to DeFi Rate.
Coinbase Denies Breach After Amplitude Incident Exposes Customer Data
Coinbase has denied that its own systems were breached after a security incident at third-party analytics provider Amplitude exposed customer data linked to the...
Polymarket Updates 5-Minute Bitcoin Contract Pricing
Polymarket is pricing its five-minute Bitcoin contracts using a 60-second average rather than a single point-in-time snapshot, according to the platform’s publi...
Intel, Oracle and IBM Object to OKX–ICE Tokenized Stock Plans
Intel, Oracle, IBM and IonQ have formally objected to the OKX–ICE tokenized stock plans, according to an October 26 public notice published by OKXICE — the join...
