New Phishing Attack Creates Malicious Pages Inside Your Browser

www.osintinvestigate.com

A new phishing campaign is changing the way attackers hide malicious websites. Instead of relying on a traditional phishing page hosted on a suspicious domain, attackers use trusted Microsoft services, redirects, and browser-generated blob URLs to create the malicious page directly inside the victim’s browser. In this episode, we explain how the attack works, why it can evade traditional security controls, and what organizations can do to improve phishing detection and browser security.