I recently signed up on Google Cloud and started using a few Maps APIs. Today, I got this e-mail:
From: Google Cloud Platform <[email protected]>
Sent: Friday, June 28, 2024 18:14
Subject: New Advisory Notification
Dear Google Cloud customer,
You've received an important Google Cloud notification affecting your resource, lustrous-walker-427209-h5’s Google Cloud service(s).
Notification Title: [Security Alert]: Polyfill.io Issue for Google Maps Platform users
[Button:] View Notification Details
Sincerely,
The Google Cloud team
I did not click on the button. I never heard of "lustrous-walker" and Googling it brought up nothing relevant. I Googled the notification title and got nothing with that title, but did see a lot of news about a "Polyfill.io" attack that has affected over 100,000 websites. I logged in to my Google Cloud account, clicked on "Console," saw the bell icon for notifications, and clicked on that. There were several notifications about my recent activity, but nothing about Polyfill.
I suspect that the e-mail is legitimate, but in case it's a spoof, I don't want to click on its button. If it is legitimate, I should have a notification somewhere in my Google Cloud portal about Polyfill. Where should I go to find that?
lustrous-walker-427209-h5
is probably your instance's default name given by Google on creation. You can change it any time in the Google Cloud console.