Phishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling

May 28, 2024, 12:59 p.m.

Description

Netskope Threat Labs has been tracking an increase in phishing campaigns hosted on Cloudflare Workers. The campaigns use techniques like HTML smuggling and transparent phishing to evade detections. The phishing pages target Microsoft and Google credentials. Netskope recommends inspecting web traffic to detect and block phishing sites.

Date

Published Created Modified
May 28, 2024, 12:36 p.m. May 28, 2024, 12:36 p.m. May 28, 2024, 12:59 p.m.

Attack Patterns

T1566.002

T1566.001

T1566

T1133