Gmail gets a new defense against phishing

With the democratization of teleworking due to the pandemic, phishing campaigns have exploded in 2020 and 2021. Witness thousands of passwords stolen during a phishing campaign, as well as recent phishing attempts targeting Disney+ and Paypal customers and displayed in the open. Google in January 2021.

In fact, phishing has quickly established itself as one of the main cyber threats for several years. And of course, Google has made this a priority, and Gmail already has a robust security system that can: automatically filter out potentially malicious emails. Still, that wasn’t enough in the eyes of the soon-to-be-announced Mountain View firm. a new security protocol in the flagship messaging system.

Google adopts BIMI standard to counter phishing

This new countermeasure is based on the BIMI standard, “An industry standard aimed at driving the adoption of strong sender authentication in the messaging ecosystem.” To summarize, BIMI messaging buyers and publishers increased reliance on the source of emailswhile giving senders a more immersive experience.

But if you don’t mind, let’s get into the details. The BIMI standard for Brand Indicators for Message Identification coordinates email publishers and domain owners to allow them. view their certified logo in an emaildirectly next to the name of the giver.

This standard is only open to domains protected by Email authentication protocol named DMARC (Domain-Based Message Authentication, Reporting, and Compliance). This protocol, associated with BIMI, allows brands to submit their government-approved logos to Google. Truth, Gmail will then be able to show the official logo instead of the avatar.

Thanks to this system, users will be able to recognize them at a glance. origin and authenticity of the sender of an emailWhile brands will be possible increase the visibility and reach of their logo. “Gmail’s BIMI support, email authentication, brand trust, and a win for consumers. BIMI empowers sender authentication across the entire email ecosystem, enabling organizations to offer their customers a more comprehensive email experience.” Says Seth Blank, chair of the AuthIndicators working group.

Source : Google