CyberWire Daily
Inside SendGrid's phishy business. [Research Saturday]
This episode isn’t summarized yet
Create a free account and summarize it. In a few minutes you’ll have the key takeaways and a section-by-section summary.
Show notes
Robert Duncan from Netcraft is sharing their research on "Phishception - SendGrid abused to host phishing attacks impersonating itself." Netcraft has recently observed that criminals abused Twilio SendGrid’s email delivery, API, and marketing services to launch a phishing campaign impersonating itself.
Hackers behind this novel phishing campaign used SendGrid’s Tracking Settings feature, which allows users to track clicks, opens, and subscriptions with SendGrid. The malicious link was masked behind a tracking link hosted by SendGrid.
Please take a moment to fill out an audience survey! Let us know how we are doing!
The research can be found here:
Phishception – SendGrid is abused to host phishing attacks impersonating itself
Learn more about your ad choices. Visit megaphone.fm/adchoices