New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links
08-August-24
Cybersecurity researchers have uncovered a phishing scam that uses Google Drawings and WhatsApp-shortened links to evade detection and trick users into revealing sensitive information. The scam starts with a phishing email leading to a graphic hosted on Google Drawings, which contains a link to a fake Amazon login page. The page uses URL shorteners for added obfuscation and is designed to steal credentials and personal details. The attack highlights the abuse of trusted platforms to bypass security measures. Additionally, a loophole in Microsoft 365’s anti-phishing mechanisms was identified, which can be exploited to hide safety warnings from users.
