URL protection services used to mask phishing attacks

Cybercriminals are abusing legitimate URL protection services to hide malicious URLs in phishing emails, according to a new Threat Spotlight from Barracuda Networks. Researchers have observed phishing attacks taking advantage of three different URL protection services to mask their phishing URLs. The services are provided by trusted, legitimate brands. To date, these attacks have targeted hundreds of companies. URL protection services work by copying URL links found in emails, rewriting them, and then embedding the original within the rewritten one. When the email recipient clicks on the link, it triggers an email security scan of the original URL. If the… [Continue Reading]