3 ms·
Could be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html The attacker's website would only be visible for half a second, and users
by cprecioso 10y ago
Could be a redirect from a regular URL:
Gmail -> Attacker's website -> data:text/html
The attacker's website would only be visible for half a second, and users are used to the dance of redirects before a login page, so this makes it not suspicious
- kogepathic 10y ago> Could be a redirect from a regular URL: Gmail -> Attacker's website -> data:text/html Sure, I agree it's a game of cat and mouse. But GMail's spam filter in my experience is pretty good, so if Google started flagging these messages as spam based on the link contents/website it would help reduce the success rate.