#htmlsmuggling — Public Fediverse posts

LevelBlue's SpiderLabs uncovers how attackers abuse Blob URLs in HTML smuggling to deliver sneaky phishing pages—like fake AmEx sites—bypassing email scanners and security tools. JavaScript decodes Base64-hidden HTML client-side for stealthy attacks. Stay vigilant! 🔒🕵️ #Cybersecurity #Phishing #HTMLSmuggling https://levelblue.com/blogs/spiderlabs-blog/html-smuggling-how-blob-urls-are-abused-to-deliver-phishing-content

https://mas.to/@nemo/115724156463085920

DCRAt Attacking Users Via HTML Smuggling To Steal Login Credentials https://gbhackers.com/dcrat-html-smuggling-credential-theft/ #CyberSecurityNews #CredentialTheft #cybersecurity #HTMLSmuggling #Malware #THREATS

Hackers Abuse HTML Smuggling Technique To Deliver Sophisticated Phishing Page https://gbhackers.com/html-smuggling-phishing/ #CyberSecurityNews #PhishingAttacks #EmailSecurity #cybersecurity #HTMLSmuggling #Phishing

Netskope reports on an Azorult infostealer campaign in the wild that delivers its initial payload through HTML smuggling. It uses reflective code loading (T1620) to execute the fileless Azorult malware, and an Anti Malware Scan Interface (AMSI) bypass technique (T1562.001) to avoid detection. Netskope provides the infection chain, infostealer features and IOC. 🔗 https://www.netskope.com/blog/from-delivery-to-execution-an-evasive-azorult-campaign-smuggled-through-google-sites

#Azorult #threatintel #HTMLsmuggling #IOC #infostealer

Catch up on last week's infosec news with our latest newsletter: https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-538

#RaspberryRobin continues to improve its evasion mechanisms, extracting more data from victims in the Financial sector.

#Dridex developers look to be dabbling in creating a Mac variant - but aren't quite there yet.

#HTMLSmuggling is being used increasingly over the past few months by heavy-hitting first stage malware such as Qakbot, IcedID and BumbleBee - make sure you understand how it works and how to spot it.

#infosec #CyberAttack #Hacked #cyber #cybernews #infosec #infosecnews #informationsecurity #cybersecurity #hacking #security #technology #hacker #vulnerability #vulnerabilities