Meanwhile, there are some warning signs that users could watch out for. For example, the legitimate Google sign-in page says "One account. All of Google." The header on the fake page says "Google Drive. One Storage."
On the fake page, there is a "Create an account" link which just reloads the same page, and if you type in the wrong password it still works — the attackers don't validate the credentials.
Sign up for CIO Asia eNewsletters.