What We Can Learn from Google’s Fight with Phishing
summary
Google measures 12.4 million potential phishing victims and 1.9 billion exposed credentials and estimates 7–25% of stolen passwords let attackers access Google accounts. A live reverse proxy phishing demo shows stolen keystrokes forwarded to real Google logins and phone slamming/number porting used to bypass SMS 2FA, while Hawkeye keylogger samples and phishing kit signatures map the underground market. Hardware bi‑directional authentication security keys block these attacks and Google reports zero successful phishing incidents after widespread key deployment.
AI-written summary · about
chapters (14)
- 0:00Introduction and team intro
- 1:07Why phishing matters today
- 2:13Live phishing demo
- 5:00How security keys stop phishing
- 6:24Phone number porting risks
- 8:06Underground credential market research
- 10:39How phishing pages work
- 13:57Keyloggers and their impact
- 15:42Breaches and credential leaks
- 17:55Why passwords are still risky
- 20:42Google’s phishing defenses
- 23:11Defense in depth at Google
- 24:15Why security keys are best
- 26:23Q&A and closing remarks
related talks
36mProtecting Users from Deception
22mThe Silent Breach: Security Threats in Google Workspace
15mPasskeys for Google accounts: learnings and our shared path forward
24mSecuring the Enterprise: How to use passkeys/WebAuthn to become phishing resistant today
13mKeynote
09mBridging the Gap: Developing Accessible Anti-Phishing Solutions
49mBeyond Takeover: Attacker’s in. Now what?
39mHacking Google - Lessons learned running and growing an internal red team