{"id":42561,"date":"2021-08-27T21:59:10","date_gmt":"2021-08-27T21:59:10","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-warns-of-widespread-open-redirection-phishing-attack-which-defender-can-block-coincidentally\/"},"modified":"2021-08-27T21:59:10","modified_gmt":"2021-08-27T21:59:10","slug":"microsoft-warns-of-widespread-open-redirection-phishing-attack-which-defender-can-block-coincidentally","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-warns-of-widespread-open-redirection-phishing-attack-which-defender-can-block-coincidentally\/","title":{"rendered":"Microsoft warns of widespread open redirection phishing attack \u2013 which Defender can block, coincidentally"},"content":{"rendered":"

Microsoft has warned that it has been tracking a widespread credential-phishing campaign that relies on open redirector links, while simultaneously suggesting it can defend against such schemes.<\/p>\n

“Attackers combine these links with social engineering baits that impersonate well-known productivity tools and services to lure users into clicking,” the company’s Microsoft 365 Defender Threat Intelligence Team said in a blog post<\/a> on Thursday.<\/p>\n

“Doing so leads to a series of redirections \u2013 including a CAPTCHA verification page that adds a sense of legitimacy and attempts to evade some automated analysis systems \u2013 before taking the user to a fake sign-in page.”<\/p>\n