Hello and welcome to the Friday, June 20th, 2025 edition of the Sand and Endowed Storm Center's Stormcast.

My name is Johannes Ulrich and this episode brought you by the Graded Certificate Program in Penetration Testing and Ethical Hacking is recorded in Stockholm, Germany.

One issue that it keeps happening is that in particular, new employees in organizations,

are being targeted by fishing or gift card scams.

Chris Crowley, Sands instructor, did set up a new Google workspace and, well, pretty much within a couple of weeks,

then started receiving phishing emails trying to target, well, luckily non-existing employees,

at that particular Google workspace.

These emails claim to come from Chris, given that he was, according to LinkedIn and

such, the owner of that particular company. And also interestingly, from address actually

then also implied some kind of urgency, which is often what's then being used to trick new employees into buying, for example, gift cards,

claiming that their new boss that they are still trying to impress,

is trying to basically get gift cards to give to some customer or the like.

Definitely something that you want to include in awareness training early on, that

particular new employees are specifically targeted by these sort of scams. And Maverbytes has an

interesting blog post about how Google is being abused in order to advertise fake tech support

numbers. Now, this is a new way to abuse Google.

We had in the past where malicious advertisers were basically just claiming to publish a tech

support number for Dell or Microsoft or whoever and included as part of their Google ad.

Now, this one is a little bit different.

When you're clicking on the link in the ad,

it actually goes to the legitimate webpage.

So, for example, in Malverabites case,

...