Threat actors are using Google’s URL decoding of non-ASCII URL data for URL encoding-enabled phishing attacks that hide the destination of malicious email links according to researchers, bypassing secure email gateways.
Don't get caught! #phishing https://t.co/Hcn4AuaoTR
— DaveGilmore_Tripwire (@DaveG_Tripwire) September 26, 2019
Experts Comments
September 27, 2019
Email gateways have matured enough to perform dynamic content inspection: a URL in an email link is scanned at the time of receipt of the email, then rewritten to go through the email security provider’s cloud for yet another inspection when the user clicks on it. The problem with any active scanning of URLs in emails is that the security vendor cannot trigger any downstream action. If the resulting page asks for acceptance of usage terms, the security solution cannot click to accept for you.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Laurence Pitt, Global Security Strategy Director, provides expert commentary at @Information Security Buzz.
"So we had to expect that it would get more intelligent, in an attempt to evade perimeter security...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/commenst-on-phishing-attacks-using-googles-url-decoding
Facebook Message
@Laurence Pitt, Global Security Strategy Director, provides expert commentary at @Information Security Buzz.
"So we had to expect that it would get more intelligent, in an attempt to evade perimeter security...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/commenst-on-phishing-attacks-using-googles-url-decoding