Cybersecurity firm Check Point has successfully blocked a sophisticated phishing campaign that exploited Google Classroom, sending over 115,000 fraudulent emails to 13,500 organizations across Europe, North America, the Middle East, and Asia in just one week.
The attackers manipulated the trusted educational platform to distribute fake classroom invitations laced with commercial spam, from reselling pitches to SEO services, aiming to lure victims into contacting scammers via WhatsApp.
Check Point’s Harmony Email & Collaboration SmartPhish technology detected and neutralized most of the phishing attempts, with additional security layers preventing the remaining messages from reaching users.
The campaign’s reliance on Google’s infrastructure allowed it to initially bypass traditional email gateways, highlighting the growing challenge of cybercriminals exploiting legitimate cloud services.
Read also: The role of technology in transforming education in Africa
“This attack underscores why conventional defenses alone are insufficient,” Check Point stated, emphasizing the need for AI-powered detection tools and multi-layered security to combat modern threats.
The firm advises organizations to educate employees on spotting suspicious invitations, monitor collaboration apps, and stay vigilant against social engineering tactics that push users to off-channel communications like WhatsApp.
While the attacks primarily targeted regions outside Africa, Nigerian organizations remain vulnerable due to the country’s increasing adoption of Google services for education and workplace collaboration.
The National Information Technology Development Agency (NITDA) recently warned of rising AI-driven phishing attacks, noting that cybercriminals use advanced tools to craft personalized messages that trick users into sharing sensitive information.
