Menlo Security uncovered a phishing campaign that abuses Google Drawings and WhatsApp’s URL shortener to redirect users through trusted services, a tactic known as Living Off Trusted Sites. By hiding malicious links behind reputable platforms, attackers increase the likelihood of successful credential theft. This method complicates detection and user awareness. The report provides IOCs to help organizations identify related activity. To stay protected, users should scrutinize URLs for unexpected redirections and avoid interacting with suspicious or unfamiliar links, even when they appear to originate from trusted services.

Join for free to read