Phishing campaign abuses multi-hop Google redirects to evade detection

Threat actors are chaining multiple Google redirect services to obfuscate phishing URLs, ultimately harvesting credentials or delivering ScreenConnect remote access. The technique exploits trusted Google domains to bypass security filters, marking an evolution in evasion tactics. The full scope and targeting are not yet disclosed.