Technology

59342 readers

5221 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

282

Phishing campaigns are using Google AMP URLs to avoid detection (www.malwarebytes.com)

submitted 1 year ago by Elephant0991@lemmy.bleh.au to c/technology@lemmy.world

11 comments fedilink hide all child comments

Summary

AMP is an open-source HTML framework that makes web content load faster on mobile devices.
Researchers have found a new phishing tactic that uses Google AMP to make URLs look trustworthy.
The tactic involves using the URL of a web page cached by the Google AMP Viewer. This URL looks similar to the original URL, but it is actually served from the google.com domain.
This gives the malicious website the legitimacy of the google.com domain, which can trick users into entering their personal information.
The researchers found that the Google AMP URLs have proven to be very successful at reaching users, even in environments protected by secure email gateways.
Along with using Google AMP URLs, the researchers also saw other techniques being used in phishing attacks, such as open redirects on trusted domains, chains of redirects linking the AMP URL to the malicious site, image-based phishing emails, and CAPTCHA services to disrupt automated analysis.
To avoid phishing attacks, it is important to not take things at face value for messages requiring urgent attention. It is also important to use a phishing-resistant password manager and a FIDO2 2FA device.

you are viewing a single comment's thread
view the rest of the comments

[–] resketreke@kbin.social 9 points 1 year ago

Another new type of phishing I've been seeing in my junk mail uses links to Bing. Not sure what it does because, as you can understand, I haven't clicked any of those.

By the way, if you use Firefox, there's this little add-on called "Redirect AMP to HTML" that might be useful to prevent this (or maybe not, I don't know).