• About Us
  • Privacy Policy
  • Disclaimer
  • Contact Us
TechTrendFeed
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT
No Result
View All Result
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT
No Result
View All Result
TechTrendFeed
No Result
View All Result

Phishing Assault Makes use of Blob URIs to Present Pretend Login Pages in Your Browser

Admin by Admin
May 10, 2025
Home Cybersecurity
Share on FacebookShare on Twitter


Cofense Intelligence reveals a novel phishing method utilizing blob URIs to create native faux login pages, bypassing electronic mail safety and stealing credentials.

Cybersecurity researchers at Cofense Intelligence have reported a brand new and more and more efficient methodology cybercriminals are utilizing to ship credential phishing pages on to customers’ electronic mail inboxes. This method, which emerged in mid-2022, leverages “blob URIs” (binary massive objects- Uniform Useful resource Identifiers).

On your data, Blob URIs are addresses that time to short-term knowledge saved by your web browser by yourself pc. These have reputable functions on the web, reminiscent of how YouTube quickly shops video knowledge inside a person’s browser for playback.

A key attribute of blob URIs is their localized nature; that’s, a blob URI created by one browser can’t be accessed by some other, even on the identical system. This inherent privateness function though useful for reputable internet features, has been weaponized by menace actors for malicious functions.

In line with Cofense Intelligence’s evaluation, shared with Hackread.com, since Blob URI knowledge isn’t on the common web, safety programs that examine emails can not simply see the dangerous faux login pages.

Due to this fact, while you get a phishing electronic mail, the hyperlink doesn’t go straight to a faux web site. As an alternative, it typically sends you to an actual web site that the safety applications belief, like Microsoft’s OneDrive. From there, you get despatched to a hidden webpage managed by the attacker.

This hidden web page then makes use of a blob URI to create the faux login web page proper in your browser. Despite the fact that this web page is simply saved in your pc, it will probably nonetheless steal your username and password and ship it to the hackers.

Phishing Attack Uses Blob URIs to Show Fake Login Pages in Your Browser
The attacker first redirects the person by way of an actual Microsoft OneDrive hyperlink earlier than resulting in the faux login web page (Picture credit score: Cofense)
Phishing Attack Uses Blob URIs to Show Fake Login Pages in Your Browser
A faux OneDrive login web page created utilizing a blob URI, proven throughout the sufferer’s browser (Picture credit score: Cofense)
Phishing Attack Uses Blob URIs to Show Fake Login Pages in Your Browser
Step-by-step movement of a phishing assault utilizing a Blob URI (Picture credit score: Cofense)

This presents a problem for automated safety programs, notably Safe Electronic mail Gateways (SEGs), which analyze web site content material to determine phishing makes an attempt, researchers famous. The novelty of phishing assaults utilizing blob URIs means AI-powered safety fashions could not but be adequately educated to tell apart between reputable and malicious makes use of.

This lack of sample recognition, mixed with the frequent attacker tactic of utilizing a number of redirects, complicates automated detection and will increase the chance of phishing emails bypassing safety.

Cofense Intelligence has noticed a number of phishing campaigns using this blob URI method, with lures designed to trick customers into logging in to faux variations of acquainted companies like OneDrive. These lures embrace notifications of encrypted messages, prompts to entry Intuit tax accounts, and alerts from monetary establishments. Regardless of the numerous preliminary pretexts, the final assault movement stays constant.

Researchers warn that one of these phishing may develop into extra frequent as a result of it’s good at getting previous safety. So, it’s necessary to watch out about hyperlinks in emails, even when they seem like they go to actual web sites, and to all the time double-check earlier than you sort in your login data. Seeing “blob:http://” or “blob:https://” within the web site deal with is usually a signal of this new trick.



Tags: AttackBlobBrowserFakeLoginPagesPhishingshowURIs
Admin

Admin

Next Post
Google and Kaggle’s Gen AI Intensive course recap

Google and Kaggle’s Gen AI Intensive course recap

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Trending.

Discover Vibrant Spring 2025 Kitchen Decor Colours and Equipment – Chefio

Discover Vibrant Spring 2025 Kitchen Decor Colours and Equipment – Chefio

May 17, 2025
Reconeyez Launches New Web site | SDM Journal

Reconeyez Launches New Web site | SDM Journal

May 15, 2025
Safety Amplified: Audio’s Affect Speaks Volumes About Preventive Safety

Safety Amplified: Audio’s Affect Speaks Volumes About Preventive Safety

May 18, 2025
Flip Your Toilet Right into a Good Oasis

Flip Your Toilet Right into a Good Oasis

May 15, 2025
Apollo joins the Works With House Assistant Program

Apollo joins the Works With House Assistant Program

May 17, 2025

TechTrendFeed

Welcome to TechTrendFeed, your go-to source for the latest news and insights from the world of technology. Our mission is to bring you the most relevant and up-to-date information on everything tech-related, from machine learning and artificial intelligence to cybersecurity, gaming, and the exciting world of smart home technology and IoT.

Categories

  • Cybersecurity
  • Gaming
  • Machine Learning
  • Smart Home & IoT
  • Software
  • Tech News

Recent News

How authorities cyber cuts will have an effect on you and your enterprise

How authorities cyber cuts will have an effect on you and your enterprise

July 9, 2025
Namal – Half 1: The Shattered Peace | by Javeria Jahangeer | Jul, 2025

Namal – Half 1: The Shattered Peace | by Javeria Jahangeer | Jul, 2025

July 9, 2025
  • About Us
  • Privacy Policy
  • Disclaimer
  • Contact Us

© 2025 https://techtrendfeed.com/ - All Rights Reserved

No Result
View All Result
  • Home
  • Tech News
  • Cybersecurity
  • Software
  • Gaming
  • Machine Learning
  • Smart Home & IoT

© 2025 https://techtrendfeed.com/ - All Rights Reserved