As cited
Copy frozen at (site build).
threat intel
From Overhyped to OH $#!T: Traversing the Tragic Quadrant with Doris
A user searching for ChatGPT was redirected to a business email compromise (BEC) scam involving ClickFix malware, a stolen session cookie, and a hidden inbox rule. The article illustrates how multiple attack vectors combined to compromise an email account.
Why it matters: Organizations need to educate users on search result spoofing and monitor for unusual inbox rules and session hijacking, as legitimate-seeming redirects can lead to credential theft and email compromise.
- Source published
- First seen by Cybersecurity Tracker