I'm a new electrum user just now installed on windows desktop download from
https://electrum.org/#download site some electrum users complained Fake Wallet Attack
https://cointelegraph.com/news/electrum-faces-another-fake-wallet-attack-users-reported-to-lose-millions-of-dollars official electrum Warning message
Warning: Electrum versions older than 3.3.4 are susceptible to phishing. Do not download Electrum from another source than electrum.org, and learn to verify GPG signatures.
so how to verify GPG signatures?