Google will introduce new guidelines for email senders starting in February 2024 to strengthen the security of emails in Gmail and prevent phishing scams and malware delivery. The company will require users who send bulk emailsto verify their email addresses and adhere to stricter criteria to avoid spam.
“Last year, we started requiring that emails sent to a Gmail address have some form of authentication,” said Neil Kumaran, Group Product Manager, Gmail Security & Trust.
See also: EvilProxy: Phishing in Microsoft 365 via open redirect indeed.com
“And we’ve seen the number of unauthenticated messages Gmail users receive drop by 75%, helping to clean up their inboxwhile blocking billions of malicious messages with greater accuracy. That’s great progress, but we need to do more — with new requirements for senders.“.
Starting February 1, 2024, Google will require senders who send more than 5,000 messages per day to accounts to set up SPF/DKIM and DMARC email verification for their domains to strengthen protection against email spoofing and phishing attempts.
Essentially, it will require them to verify address , configuring their systems to prove that they own their domain name and that they are not spoofing IP addresses.
These senders must also provide Gmail recipients with the ability to unsubscribe from commercial emails with a single click and must respond to unsubscribe requests within two days.
See also: AI-generated phishing emails are increasingly difficult to detect
From now on, email senders will have to adhere to a certain spam rate limit so as not to fill Gmail users' Inboxes with unwanted content.
They should keep spam rates below 0.3%, as indicated in Postmaster Tools, and avoid Gmail impersonation in the “From” headers of their messages . Failure to comply with the new regulations could lead to email delivery issues.
“If you don’t meet the requirements [..], your email may not be delivered as expected or may be marked as spam,” Google explains.
According to Google, the AI- successfully block over 99.9% of spam ,phishing attempts, and malware delivery. This prevents malicious emails from reaching customers’ inboxes, effectively blocking nearly 15 billion spam emails every day.
See also: AtlasCross Group: Using the American Red Cross as a phishing lure
Malicious emails pose a significant security risk to Gmail users, seeking access to personal information and sensitive data. Users should always be aware and cautious. But Google, for its part, is trying to protect them and continues to invest in technologies and security measures to prevent phishing and the distribution of malware.
However, Google's changes could also affect some legitimate marketers who aggressively use emails to promote their services to customers.
Source: www.bleepingcomputer.com
