Electrum uses third-party servers for its work, and this is a potential attack vector.
I've never read about an attack by giving fake block information or something. The only thing I've seen is a server telling the user to download malware.
You are completely accurate, but I would like to offer an alternative viewpoint on this. It is true that there have been no known occurrences of a block chain attack using fake block information, but I do not believe this is sufficient evidence to conclude that such an assault is impossible. For example, if an extensive group of hackers had control over the majority of the computational power in a blockchain network, they could hypothetically generate a false history of transactions, causing widespread confusion and potentially undermining the network. Although this may be considered to be a theoretical attack, it should still be considered seriously, and I do not believe we should dismiss the likelihood of such an attack simply because it has not yet been observed in the wild.