Phishing network uses Google Cloud and fake NYT pages

A phishing network spanning 12,704 servers in 55 countries uses Google Cloud Storage links to evade security scanners. Fake New York Times pages act as decoys. The campaign routes victims through trusted Google domains before redirecting to attacker-controlled sites, bypassing email gateways and filters.