Spoofing SaaS Vanity URLs for Social Engineering Attacks

SaaS vanity URLs can be spoofed and used for phishing campaigns and other attacks. In this article, we’ll showcase two Box link types, two Zoom link types, and two Google Docs link type that we were able to spoof.

InfoSec Guide: Mitigating Email Threats - Security News

A Comprehensive Overview of In-App Chat Scams: Pt 2

PDF) Phishing URL Detection using Machine Learning

Email Phishing Scams and How to Avoid Them

Researchers uncover URL spoofing flaws on Zoom, Box, Google Docs - Help Net Security

Phishing through Slack for initial access

What Are Social Engineering Attacks and How to Prevent Them - SEON

Barracuda Email Protection - Phishing and Impersonation Protection

Vanity URLs Could Be Spoofed for Social Engineering Attacks

S12: The Evolving SaaS Cyber Kill Chain - BlueHat Oct 23 — Eightify

What is phishing?

Website spoofing: A definition + how spoofing works