The report describes a Kimsuky phishing site that impersonated Google Drive and used a fake Google/Gmail service interruption notice to push users toward reauthentication. The lure at gplokio[.]site redirected victims through another domain toward a spoofed Google login flow intended to capture user credentials. The campaign relied on familiar Google branding, error-message language, and login prompts to make the credential-harvesting page appear legitimate.