3 ms·
As I understand, the attack is preformed by when someone mentions attaching a file to an email (i.e. "I've attached invoice.zip"), then that filename becomes a
by yonatan8070 3y ago
As I understand, the attack is preformed by when someone mentions attaching a file to an email (i.e. "I've attached invoice.zip"), then that filename becomes a clickable link, and the user clicks it expecting to download the file, but is actually taken to the attacker's website which looks like WinRAR, and download malware from there.
To me this attack sounds too convoluted to actually get people, since you'll need to buy a lot of domains to match someone's email's contents
- hulitu 3y agoattachment.zip ?
- eli 3y ago<a href="https://malware.example.com/">attachment.zip</a> https://malware.example.com/">attachment.zip</a>
- eli 3y agoWhich email client automatically creates links? Virtually everyone uses HTML email, which can link any text to any destination. If your users are clicking links to download files that they got via email from untrusted sources...then the domain doesn't really matter.
- yonatan8070 3y agoI just tried emailing myself a few links and they all got automatically hyperlinked by Outlook on Android. Here are the links I tried testlink.com link.gov abc.zip test.xyz I agree about being able to hyperlink pretty much anything having the same effect, that's why I don't think the .zip TLD is a big issue