Open redirect

Open redirect: Avast
May 22, 2023 · Open redirect Suspicious link ·
Share on:
Detects emails containing links to avast.com leveraging an open redirect

Read More
Open Redirect (go2.aspx) leading to Microsoft credential phishing
May 9, 2023 · Suspicious link Credential phishing Open redirect ·
Share on:
This rule is designed to detect credential phishing attacks that exploit go2.aspx redirects and masquerade as Microsoft-related emails.

Read More
PDF attachment with Google (AE) redirecting to a php file
Apr 21, 2023 · Suspicious attachment Open redirect QakBot ·
Share on:
Detects a PDF attachment with a link that contains a Google.ae redirect URL

Read More
Open redirect: Ticketmaster
Mar 31, 2023 · Open redirect Suspicious link ·
Share on:
Message contains use of the Ticketmaster open redirect, but the sender is not Ticketmaster. This has been exploited in the wild.

Read More
Link to Google Apps Script macro via Comment Tagging
Feb 2, 2023 · Suspicious link Open redirect ·
Share on:
Message contains a Google Apps Script macro link invoked from a comment on Google Slides|Docs. App Scripts can run arbitrary code, including redirecting the user to a malicious web page.

Read More
Link to Google Apps Script macro (unsolicited)
Dec 23, 2022 · Suspicious link Open redirect ·
Share on:
Message contains a Google Apps Script macro link. App Scripts can run arbitrary code, including redirecting the user to a malicious web page.

Read More
Open redirect: MSN
Dec 10, 2022 · Suspicious link Open redirect ·
Share on:
Message uses an MSN open redirect.
Sample (benign) redirect to sublimesecurity[.]com: https[:]//www[.]msn[.]com/en-gb/lifestyle/rf-best-products-uk/redirect?url=aHR0cHM6Ly93d3cuc3VibGltZXNlY3VyaXR5LmNvbQ==

Read More
Open redirect: BMW USA
Oct 26, 2022 · Suspicious link Open redirect ·
Share on:
Message contains use of BMW USA's open redirect but the sender is not BMW.

Read More