From its opening minutes, Moves of the Diamond Hand is upfront about what it offers: You’re going to have a lot of strange conversations, and you’re going to roll a lot of dice. Get on board with this proposition, and the reward is one of the most creative roleplaying games I’ve seen in years, even if its many mysteries won’t be resolved until 2027.
Technology
Hackers abuse Google Cloud to send trusted phishing emails
NEWYou can now listen to Fox News articles!
Cybercriminals have found a clever new way to get phishing emails straight into inboxes.
Instead of spoofing brands, they are abusing real cloud tools that people already trust. Security researchers say attackers recently hijacked a legitimate email feature inside Google Cloud.
The result was thousands of phishing messages that looked and felt like normal Google notifications. Many slipped past spam filters with ease.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – when you join my CYBERGUY.COM newsletter.
How this Google Cloud phishing attack worked
At the center of the campaign was Google Cloud Application Integration. This service allows businesses to send automated email notifications from workflows they build. Attackers exploited the Send Email task inside that system. Because the messages came from a real Google address, they appeared authentic to both users and security tools.
According to Check Point, a global cybersecurity firm that tracks and analyzes large-scale threat campaigns, the emails were sent from a legitimate Google-owned address and closely matched Google’s notification style. Fonts, wording, and layout all looked familiar. Over a two-week period in December 2025, attackers sent more than 9,000 phishing emails targeting roughly 3,200 organizations across the U.S., Europe, Canada, Asia Pacific, and Latin America.
Attackers used trusted Google Cloud infrastructure to route victims through multiple redirects before revealing the scam. (Thomas Fuller/SOPA Images/LightRocket via Getty Images)
MALICIOUS CHROME EXTENSIONS CAUGHT STEALING SENSITIVE DATA
Why Google phishing emails were so convincing
The messages looked like routine workplace alerts. Some claimed you had received a voicemail. Others said you were granted access to a shared document, like a Q4 file. That sense of normalcy lowered suspicion. Many people are used to seeing these exact messages every day. Even more concerning, the emails bypassed common protections like SPF and DMARC because they were sent through Google-owned infrastructure. To email systems, nothing looked fake.
What happens after you click
The attack did not stop at the email. Once a victim clicked the link, they were sent to a page hosted on storage.cloud.google.com. That added another layer of trust. From there, the link redirected again to googleusercontent.com. Next came a fake CAPTCHA or image check. This step blocked automated security scanners while letting real users continue. After passing that screen, victims landed on a fake Microsoft login page hosted on a non-Microsoft domain. Any credentials entered there were captured by the attackers.
Who was targeted in the Google Cloud phishing attack
Check Point says the campaign focused heavily on industries that rely on automated alerts and shared documents. That included manufacturing, technology, finance, professional services, and retail. Other sectors like healthcare, education, government, energy, travel and media were also targeted. These environments see constant permission requests and file-sharing notices, which made the lures feel routine.
“We have blocked several phishing campaigns involving the misuse of an email notification feature within Google Cloud Application Integration,” a Google spokesperson told Cyberguy. “Importantly, this activity stemmed from the abuse of a workflow automation tool, not a compromise of Google’s infrastructure. While we have implemented protections to defend users against this specific attack, we encourage continued caution as malicious actors frequently attempt to spoof trusted brands. We are taking additional steps to prevent further misuse.”
The incident demonstrates how attackers can weaponize legitimate cloud automation tools without resorting to traditional spoofing.
Ways to stay safe from trusted-looking phishing emails
Phishing emails are getting harder to spot, especially when attackers abuse real cloud platforms like Google Cloud. These steps help reduce risk when emails look familiar and legitimate.
1) Slow down before acting on alerts
Attackers rely on urgency. Messages about voicemails, shared files or permission changes are designed to make you click fast. Pause before taking action. Ask yourself whether you were actually expecting that alert. If not, verify it another way.
2) Inspect links before you click
Always hover over links to preview the destination domain. In this campaign, links jumped across multiple trusted-looking Google domains before landing on a fake login page. If the final destination does not match the service asking you to sign in, close the page immediately.
3) Treat file access and permission emails with caution
Shared document alerts are a favorite lure because they feel routine at work. If an email claims you were granted access to a file you do not recognize, do not click directly from the message. Instead, open your browser and sign in to Google Drive or OneDrive manually to check for new files.
The final step led users to a fake Microsoft login page, where entered credentials were silently stolen. (Stack Social)
4) Use a password manager to catch fake login pages
Password managers can be a strong last line of defense. They will not autofill credentials on fake Microsoft or Google login pages hosted on non-official domains. If your password manager refuses to fill in a login, that is a red flag worth paying attention to.
Next, see if your email has been exposed in past breaches. Our #1 password manager (see Cyberguy.com/Passwords) pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2025 at Cyberguy.com.
NEW GOOGLE AI MAKES ROBOTS SMARTER WITHOUT THE CLOUD
5) Run strong antivirus software with phishing protection
Modern antivirus tools do more than scan files. Many now detect malicious links, fake CAPTCHA pages, and credential harvesting sites in real time. Strong antivirus software can block phishing pages even after a click, which matters in multi-stage attacks like this one.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
6) Reduce your exposure with a data removal service
Phishing campaigns often succeed because attackers already know your email, employer or role. That information is commonly pulled from data broker sites. A data removal service helps remove your personal information from these databases, making it harder for attackers to craft convincing, targeted emails.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
7) Enable two-factor authentication (2FA) everywhere
Even if attackers steal your password, two-factor authentication (2FA) can stop them from accessing your account. Use app-based authentication or hardware keys when possible, especially for work email, cloud storage, and Microsoft accounts.
8) Report suspicious emails immediately
If something feels off, report it. Flag suspicious Google or Microsoft alerts to your IT or security team so they can warn others. Early reporting can stop a phishing campaign before it spreads further inside an organization.
Google phishing emails looked like routine workplace alerts. (Kurt “CyberGuy” Knutsson)
Kurt’s key takeaways
This campaign highlights a growing shift in phishing tactics. Attackers no longer need to fake brands when they can abuse trusted cloud services directly. As automation becomes more common, security awareness matters more than ever. Even familiar emails deserve a second look, especially when they push urgency or ask for credentials.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
If a phishing email comes from a real Google address, how confident are you that you would spot it before clicking? Let us know by writing to us at Cyberguy.com.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Moves of the Diamond Hand is an Early Access videogame available on PC, macOS, and steamOS (including the Steam Deck, where I played it) from musician and game designer Cosmo D. The game looks and feels like a 2000s-era first-person RPG or immersive sim: environments are grimy, stark, and blocky; characters’ features are stretched over smooth heads a bit too small for their faces; an eerie soundtrack pulses over all. You’ll arrive on a train and immediately meet an old mentor, disgraced by some kind of political scandal. You convey your desire to join a powerful organization called Circus X, then declare which of several wildly different paths you’ll take into its fold — you can try joining the city council, but could find equal success crafting the perfect sandwich or joining the best band.
These options help introduce the central mechanic. The game gives you one upgradeable die for each of seven stats, ranging from standard fare like Physique and Observation to the more idiosyncratic Cooking and Music. To set a challenge, it will roll a die corresponding to one of those attributes, and you’ve got to match or beat it with your own roll.
Once you emerge into the train station, the complexity quickly multiplies. There are a plethora of sub-mechanics including cooking, performing music, laundering disguises, and mixing cocktails — all of which add additional dice with unique quirks. You can selectively re-roll dice in a manner similar to Yahtzee, introducing an element of strategy within each encounter, and your final score (win or lose) is translated into experience points. The basic system was introduced in Cosmo D’s last game, Betrayal at Club Low, but in a less flexible and elegant form; Diamond Hand feels like its evolution. (Disclosure: My husband has provided outside feedback for Cosmo D’s games.)
It’s all a little intimidating at first. But the game allows you to ease into its options, which happens quickly, since you’re rolling for virtually every action and verbal exchange from making small talk to opening a door. There’s a meaningful element of chance to all this, without descending into unbounded randomness. Some rolls can be mathematically impossible to win or lose at a given skill level, but it’s possible to still damage your health or gain an unwelcome status effect with safe challenges, preventing them from becoming purely rote. You can retry most actions if you fail them, but they’ll become slightly more difficult on a second attempt, so there’s a constant balancing act of deciding when to take the initial leap. The ambient low-level risk makes even simple spaces feel substantive and engaging — it negates the common RPG urge to speed through environmental detail and flavor text while looking for the “real” parts of the game.
Through countless skill checks, you’ll internalize the odd logic of the game’s world. The setting, Off-Peak City, is a garish metropolis shaped by the machinations of sinister corporations, corrupt politicians, and shady operatives, but also musicians, restaurateurs, and literally and figuratively underground tailors — a neon retro-future for streetwise aesthetes. What might be niche skills in any other game prove extraordinarily powerful here. The Music stat, whose uses include sewing (machines can, among other options, be literally operated by improvisation), calming aggressive animal-human hybrids (by whistling tunes), and mixology (which can be performed “rhythmically”), is arguably the single strongest power in the game.
Circus X, you’ll soon learn, is a secretive arts institution that influences everything from politics to the sandwich supply chain — imagine the Factory crossed with the Freemasons. While pursuing membership, you’re embroiled in a local election between a scandal-plagued technocrat, a former boy-band star, and the corporate-controlled clone of a mayor from decades past. In place of a Maltese Falcon, everyone’s scheming for control of a sentient Big Mouth Billy Bass. And meddling behind the scenes is the mysterious, anarchic Diamond Hand, frequently alluded to but not explained.
Diamond Hand’s story evokes real-world parallels, but as a jumping-off point for something that’s rich and alive in its own right. In perhaps the most obvious example, a company in Off-Peak City is pumping the place full of clones, supplanting human artists with corporate-guardrailed regurgitations of old media. But rather than stop at commentary, the game walks this out to explore the idea that clones are also conscious beings who are frustrated by their creative limits and lack of autonomy, while letting human characters reflect on their own relationship with nostalgia and artistic taste.
Put this all together and you’ve got a hard-boiled sci-fi thriller involving subway busking, finding library books, stumping for politicians, harvesting lettuce, arguing about jazz, and doing laundry, infused with the lizard-brain appeal of a nonstop game of chance. It’s irresistible.
Most of Diamond Hand’s main quests end in roadblocks, because its Early Access build includes only the first two of six chapters, with the next scheduled for this summer and a full launch set for the spring of 2027. But even in its current state, Diamond Hand is dense and tantalizing, delivering a string of absurd premises and dry humor with a straight face. (Among many tossed-off jokes that are also actual game mechanics, local pizza-makers require everyone to bake their own pie, so if you don’t like your order, you have only yourself to blame.) You’re granted experience points for letting characters ramble through their backstories and opinions — which lands somewhere between a sly gag about RPG infodumping and a straightforwardly clever decision — but the dialogue pays off even without that prize.
And for all its dystopian elements, there’s something idealistic about a world where art, for good or ill, deeply matters. Diamond Hand may be a work in progress, but it’s a recipe for becoming obsessed with skill and perfection, chasing the world’s greatest sandwich and the string of lucky dice rolls that will get you there.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
NEWYou can now listen to Fox News articles!
Getting hacked once is scary enough. But getting hacked again after changing carriers, replacing cards and trying to recover your accounts can make it feel like the criminals are always one step ahead. That is exactly what happened to Lela in Ohio, who reached out after a frightening string of account takeovers.
“All my accounts have been hacked,” Lela said. “I had my phone number transferred to another carrier, AT&T, and I’m experiencing it again. They have hacked my phone number again.” She said criminals accessed her checking accounts, credit cards and even started charging new cards before she received them.
Then she asked the question anyone in her situation would be asking: “Should I be just getting a new phone number instead of trying to recover the number I’ve had for 20 years?”
The answer is maybe, but changing your number should rarely be the first move. A new number can help in some cases. However, if hackers still control your email, bank login, recovery settings or wireless account, they may keep breaking back in.
SCAMMERS TARGET WIRELESS CUSTOMERS IN NEW PHONE SCHEME
A SIM swap or port-out scam can let criminals take over your phone number and intercept security codes for sensitive accounts. (Jacob Wackerhausen/Getty Images)
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Why your phone number matters so much
Your phone number may feel harmless. After all, it is how friends, family, doctors and businesses reach you. But today, that number is also connected to some of your most important accounts. It may be tied to your bank accounts, credit cards, email accounts, Apple ID, Google account, medical portals, shopping accounts and password resets.
That makes it valuable to criminals. If a scammer takes control of your number, they may receive your calls and text messages. That includes security codes meant only for you. From there, they can reset passwords, break into email, access financial accounts and keep returning even after you think you fixed the problem.
What is a SIM swap or port-out scam?
A SIM swap scam happens when a criminal tricks your mobile carrier into moving your phone number to a SIM card or eSIM they control. A port-out scam happens when they move your number to another carrier.
Once that happens, your phone may suddenly lose service. Meanwhile, the scammer may start receiving your calls and texts. That can give them access to verification codes for email, banking, credit cards and other accounts.
In some cases, victims do not realize what happened until money disappears or accounts get locked.
Should Lela get a new phone number?
Maybe, but not immediately. If Lela gives up her long-time number too fast, she could lose access to accounts that still use that number for recovery. Even worse, if a criminal still controls the old number, they may continue receiving password reset codes for accounts tied to it. Before changing the number, she should secure the number she has and update her most important accounts.
A new number may make sense if the number keeps being targeted despite carrier protections. It may also help if hackers keep using it to reset accounts, the carrier confirms unauthorized SIM swaps or too many accounts tied to that number have already been compromised. A new number may also be worth considering if the old number is widely exposed on the dark web or data broker sites. Still, keeping the number may be safer for now if she needs it to recover critical accounts.
First, lock down the wireless account
Lela should call AT&T directly using the official number on AT&T’s website or on her bill. She should avoid numbers from texts, emails or voicemails. She should ask AT&T to check for SIM swap attempts, port-out requests, unauthorized account changes, new devices, call forwarding, number transfer activity and unknown authorized users.
Then she should ask AT&T to add stronger protections, including a strong account PIN, port-out freeze or number transfer lock, SIM lock if available and extra account verification. She should also remove any unknown authorized users. This makes it much harder for criminals to move her number again.
Secure your email before changing everything else
Your email is often the master key to your digital life. If a hacker controls your email, they can reset passwords for banks, credit cards, shopping accounts and social media. Before changing every password, Lela should make sure her main email account is clean and secure.
She should change her email password from a safe device, sign out of all sessions, check recovery email addresses, review recovery phone numbers and remove unknown forwarding rules. She should also review connected apps and devices and turn on stronger two-factor authentication (2FA). If email remains compromised, a hacker can keep undoing every recovery step.
Stop relying on text message codes
Text message codes are better than having no protection. However, they become risky when criminals target your phone number. For important accounts, use an authenticator app, a security key or passkeys where available.
This matters most for email, banking, credit cards, Apple ID, Google account, social media, password managers, tax accounts and government accounts. This makes your accounts much harder to break into, even if a criminal gets control of your phone number.
ARE BANK TEXT CODES ENOUGH TO PROTECT YOU?
Hackers can use a stolen phone number to reset passwords, break into email and access bank or credit card accounts. (Kurt “CyberGuy” Knutsson)
Change passwords from a safe device
If your phone, tablet or computer has malware, changing passwords from that device may hand the new passwords right back to the hacker. Before resetting passwords, make sure the device is safe. Update the operating system. Delete unknown apps. Run strong antivirus protection. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
Avoid links in suspicious texts or emails. Then use a password manager to create unique passwords for every important account. Never reuse old passwords after a hack. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.
Protect bank accounts and credit cards next
Since Lela said criminals charged new cards before she received them, she should treat this as possible identity theft or account takeover. She should call each bank and credit card company directly and ask for the fraud department. She should explain that her accounts, phone number or identity may have been compromised.
Ask each bank to cancel compromised cards, issue new card numbers, review recent activity, add verbal passwords or extra verification and remove unknown devices from online banking. She should also turn on transaction alerts and ask whether wire transfers, Zelle or other payment tools need temporary limits. Finally, she should check whether criminals opened any new accounts in her name.
Freeze your credit and file an identity theft report
If criminals have enough information to keep attacking your accounts, a credit freeze can help stop them from opening new credit in your name. Place a credit freeze with Equifax, Experian and TransUnion. You can also place a fraud alert.
Then file an identity theft report at IdentityTheft.gov. That report can help create an official recovery plan. It can also provide documentation if banks, lenders or credit bureaus need proof.
Check whether your personal information is exposed
If scammers already have your phone number, email, address, date of birth or other personal details, they may use that information to impersonate you.
A data removal service can help reduce the amount of personal information exposed on people-search sites and data broker sites. Data removal will not fix a hacked account by itself. Still, it can reduce the information scammers use to target you again. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
Warning signs your phone number may still be under attack
Even after you lock things down, keep watching for signs that criminals are still trying to use your number or accounts. These red flags should get your attention fast.
1) Your phone suddenly loses service
If your phone switches to SOS mode, loses service or stops receiving calls and texts, contact your carrier right away. That can be a sign of a SIM swap or port-out attempt.
2) You receive password reset codes you did not request
Random security codes can mean someone is trying to break into one of your accounts. Do not share the code with anyone. Go directly to the account website or app and change your password from a safe device.
3) Your carrier sends account change alerts
Take any wireless account alert seriously. This includes alerts about a new SIM, eSIM, device, PIN change or number transfer request.
HOW SIM SWAPPING LED TO A $1.8M CYBER FRAUD CASE
A new phone number may help after repeated attacks, but victims should first secure email, banking and wireless account settings. (Kurt “CyberGuy” Knutsson)
4) Your bank alerts show strange activity
Watch for small test charges, declined transactions, new payees or changes to contact information. Criminals often test an account before making bigger moves.
5) Your email shows unfamiliar logins
Check recent login activity, connected devices, forwarding rules and recovery options. If anything looks unfamiliar, remove it and change your password.
When changing your number may be the right move
If the warning signs keep showing up after you lock things down, then changing your number may be worth considering. Changing the number may help if the current number remains a constant attack path. But before switching, Lela should update her phone number on critical accounts first.
That includes email, bank accounts, credit cards, Apple ID, Google account, Social Security account, IRS account, password manager, medical portals, insurance accounts, investment accounts, utilities and shopping accounts. Then she should remove the old number from account recovery settings wherever possible.
Do not forget account recovery settings
A common mistake after a hack is changing the password but forgetting the recovery options. If the scammer added their email, phone number or device, they may still be able to get back in.
Check every important account for recovery phone numbers, recovery email addresses, trusted devices, backup codes, linked apps, forwarding settings, authorized users and payment methods. Remove anything unfamiliar.
Kurt’s key takeaways
A new phone number can help, but it is no magic fix. If hackers still have access to Lela’s email, bank logins, recovery settings or personal information, they may keep getting back in even with a new number. The smarter order is to lock down the wireless account first. Then secure email, stop using text codes, change passwords from a safe device and protect bank accounts. After that, freeze credit, file an identity theft report and remove exposed personal information from the web. Only then should you decide whether changing your number is necessary. Your phone number may feel personal, especially if you have had it for 20 years. But once criminals use it as a doorway into your life, the real goal is cutting off every way they can use it against you.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Have you ever had your phone number, email or bank account hacked? What was the first sign that something was wrong? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Nothing’s next budget phone is the latest victim of RAMageddon. As 9to5Google reports, Nothing co-founder Akis Evangelidis announced in a post on X that a follow-up to the CMF Phone 2 Pro won’t be coming this year:
We were working on a successor but with memory prices where they are right now, we can’t build a phone that feels like a genuine step forward at a price that makes sense for CMF. As a result, we’ve decided not to launch a new CMF phone this year.
Last week, Nothing CEO and co-founder Carl Pei also said the RAM shortage has impacted the cost of the company’s mid-range phone, stating, “For Phone 4A, memory costs doubled between when we decided to build the device and when it launched. They’ve doubled again since.” According to Pei, “memory is now the most expensive component in a smartphone.” Nothing is far from the only company facing RAM pricing challenges — earlier this week, Tim Cook announced Apple will be raising prices, saying “the situation has become unsustainable.”
While there won’t be a new CMF phone this year, Evangelidis added in his post that CMF still has “several new products launching as well as some entirely new categories.” He also hinted that “the smartphone launch season at Nothing isn’t over yet.”
-
Lifestyle11 minutes agoJudy Blume says she’s done writing: ’50 years is enough!’
-
Education14 minutes agoRuth Bader Ginsburg, Booker T. Washington and 6 Other Americans Who Shaped U.S. History
-
Technology19 minutes agoMoves of the Diamond Hand is an unfinished, irresistibly weird dice-based RPG
-
World26 minutes agoMan charged with attempted murder, released after allegedly forcing toddler into crocodile enclosure at zoo
-
Politics28 minutes agoTrump says Iran missiles ‘aren’t the problem’ after White House made them central to war rationale
-
Health34 minutes agoPopular weight-loss drugs linked to unexpected male fertility benefit
-
Sports41 minutes agoCubs look to build on offensive breakout against struggling Blue Jays starter Patrick Corbin
-
Technology44 minutes agoShould you change your phone number after a hack?
