{"id":28292,"date":"2019-08-07T14:00:00","date_gmt":"2019-08-07T14:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/threat-intelligence\/rethinking-website-spoofing-mitigation\/a\/d-id\/1335427"},"modified":"2019-08-07T14:00:00","modified_gmt":"2019-08-07T14:00:00","slug":"rethinking-website-spoofing-mitigation","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/","title":{"rendered":"Rethinking Website Spoofing Mitigation"},"content":{"rendered":"
\n<\/header>\n

Deception technology is evolving rapidly, making it easier for organizations to turn the tables on their attackers. Here’s how.<\/span> <\/p>\n

Website spoofing is a common problem that has doubled in the last year, resulting in $1.3 billion in losses<\/a>, according to the 2019 Thales Access Management Index (registration required). In a high-profile example of website spoofing that has left the business world more than a little rattled, hackers successfully diverted about 500,000 customers visiting the British Airways website last summer to a realistic-looking but fraudulent site, without the airline having any idea it had been spoofed.<\/p>\n

The spoof site gathered names, addresses, login information, payment card details, and other data. After a review by the EU’s Information Commissioner’s Office, British Airways<\/a> faces a possible record-breaking fine for violating the terms of General Data Protection Regulation (GDPR), to the tune of \u00a3183.5 million \u2014 about 1.5% of the airline’s annual revenue. Because of website spoofing, not only does the airline suffer losses to its customers and its brand but the additional government-levied fines and financial pain.<\/p>\n

This attack vector has been around for decades and continues to be popular because it’s difficult to detect until it’s too late. For a fairly small investment<\/a>, adversaries can acquire all the tools they need on the Dark Web to set up highly convincing website-spoofing schemes, as part of a larger phishing campaign. Website spoofing works on all of the major Internet browsers and is not prevented by “secure” connections. The adversary can observe and modify all website pages and form submissions, even when the browser’s “secure connection” indicator is lit. The user sees no easily discernible indication that anything is wrong. Even sites protected by two-factor authentication cannot escape the assault.<\/p>\n

Under Europe’s GDPR, multinational corporations must make every effort to provide “reasonable security” mechanisms to protect personal data. As the British Airways fine shows, “reasonable security” now extends to spoofed sites that the organization never even knew about. This incident should serve as a wake-up call that current methodologies aren’t effective enough. It’s time to rethink the way we approach detection and mitigation of website spoofing incidents.<\/p>\n

Shift the Focus<\/strong>
To date, options for detecting when a website has been spoofed have largely relied on monitoring domain registrations and manual web searches. However, this approach is susceptible to human error and is only capable of identifying spoofed websites after the fraud occurs. A common approach for detecting website spoofing has been to search for brand images and relevant content from the copied site. But this approach leaves the attacked company with no insight into how many and which of its clients were potentially victimized and does nothing to deter the next attack.<\/p>\n

Another familiar approach has been to train workers and consumers to be able to spot fakes. This is a good idea in theory because it educates and empowers individuals. It’s true that in some cases, spoofed sites can be detected because something “looks off” compared with the original website. However, the sheer volume of spoofs being created and the increased level of sophistication behind these attacks makes it quite difficult for the user to spot them with certainty. It also places an unfair burden on the victim of the attack, making them responsible for detection instead of the owner of the original website that’s been targeted.<\/p>\n

Domain registration monitoring and training employees fail to help organizations detect spoofing early in the life cycle of an attack, before data is stolen. Further, these approaches cannot help businesses understand how long the fake site has been active, and most importantly, how many customers or employees may have been victimized. The two biggest challenges of all \u2014 who initiated the attack and deterring the adversary from trying it again \u2014 are completely left out of the mitigation process with these approaches.<\/p>\n

Deceiving the Deceivers<\/strong>
A more sensible strategy is to focus on early detection and a smarter mitigation strategy called deception technology that is painful to the attacker and provides actionable data for organizations. (Disclaimer: Allure is one of a number of vendors that market deception technology products.) The idea is to flood the adversary with highly believable decoy credentials and personal information. This causes a great deal of doubt about what may have been stolen, making it hard for the fraudster to discern what is real and what is fake. The only way to know is to test all credentials at the real site, causing greater overhead costs for the adversary, and providing an opportunity to gather information about the attacker when decoy logins occur, such as endpoint IP addresses under his or her control.<\/p>\n

Deception techniques could finally shift the advantage in favor of the legitimate businesses victimized by website spoofing. At Columbia, our Computer Science and IDS Lab<\/a> has been conducting experiments to determine how certain deception techniques can bait adversaries with highly convincing but false credentials embedded with tracking mechanisms that are triggered when the attacker attempts to open or exfiltrate them. We called this the “BotSwindler,” and it aims to detect crimeware such as spoofing by deceptively inducing attackers into an observable action during the exploitation of monitored information injected into the guest OS. To entice attackers with information of value, the system supports a variety of different types of bait credentials, including decoy Gmail and PayPal authentication credentials, as well as those from large financial institutions.  <\/p>\n

Whether the motivation is to spread fake news in pursuit of influence, steal customer login credentials or credit card numbers for financial gain, or break into cloud shares and networks to exfiltrate intellectual property, website spoofing has devastating effects on company reputation, consumer trust, and corporate revenues. It’s time to take a more modern approach to solving this pervasive security problem. Simply detecting IP anomalies isn’t enough. Deception technology is evolving rapidly and is well-positioned to detect website spoofing schemes sooner, giving organizations the ability to turn the tables on adversaries.<\/p>\n

Related Content:<\/strong><\/p>\n

\n

<\/p>\n

 <\/em><\/strong><\/p>\n

Black Hat USA returns to Las Vegas with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions, and service providers in the Business Hall. Click for information on the conference<\/a> and to register.<\/a><\/em><\/strong><\/p>\n<\/div>\n

Dr. Salvatore Stolfo is the founder and CTO of Allure Security. As a professor of artificial intelligence at Columbia University since 1979, Dr. Stolfo has spent a career figuring out how people think and how to make computers and systems think like people. Dr. Stolfo has … View Full Bio<\/a><\/span> <\/p>\n

More Insights<\/span><\/p>\n

Read More HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Deception technology is evolving rapidly, making it easier for organizations to turn the tables on their attackers. Here’s how. Read More HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-28292","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"\nRethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-07T14:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Rethinking Website Spoofing Mitigation\",\"datePublished\":\"2019-08-07T14:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\"},\"wordCount\":1096,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\",\"name\":\"Rethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png\",\"datePublished\":\"2019-08-07T14:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage\",\"url\":\"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png\",\"contentUrl\":\"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.threatshub.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rethinking Website Spoofing Mitigation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Rethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/","og_locale":"en_US","og_type":"article","og_title":"Rethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-08-07T14:00:00+00:00","og_image":[{"url":"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Rethinking Website Spoofing Mitigation","datePublished":"2019-08-07T14:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/"},"wordCount":1096,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/","url":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/","name":"Rethinking Website Spoofing Mitigation 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png","datePublished":"2019-08-07T14:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#primaryimage","url":"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png","contentUrl":"https:\/\/www.blackhat.com\/images\/page-graphics-usa-19\/banners\/399219_BH_US19-Web-Banners_468x80-plain.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/rethinking-website-spoofing-mitigation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Rethinking Website Spoofing Mitigation"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28292","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=28292"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28292\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=28292"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=28292"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=28292"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}