Phishing and social engineering are getting more sophisticated at an exponential rate due to AI. Proton just let a phishing email go through to my inbox that I think will compromise tens of thousands of folks. How it seems to work: someone added my email to a real Google Group. They then sent out a message to all members of the group with subject line "Your Google data has been exported." Obviously this will cause many people to panic. The email went through to my inbox because it came from a legit google group from a legit Google URL. All links in the email look totally normal – unless you look at the link for "Cancel request" button. But amazingly this one also seems to come from a genuine Google URL – a URL shortener from Google! goo[dot]gl/XXXXX (not putting the real URL here). Then it takes you to (1) a Recaptcha screen and then (2) a genuine looking Google account login screen. It's hosted on a Google site (sites[dot]google[dot]com) so everything looks legit. Because all links are technically hosted by Google, this is very very bad.