Cybercriminals Use Firebase Developer Accounts to Distribute Phishing Emails

Cyberpress • February 7, 2026

Share: View original

A new wave of phishing campaigns where attackers are abusing legitimate Google infrastructure to target victims.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cybercriminals Exploit Firebase Accounts for Phishing Campaigns Cybercriminals are exploiting free Firebase developer accounts to launch phishing campaigns, using Google's infrastructure to distribute malicious emails. This tactic allows attackers to mask their activities, complicating detection efforts for security systems and personnel. Organizations and individuals who interact with these phishing emails are at risk of falling victim to scams. 3 sources 25

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

T1566 - Phishing

Platforms (1)