Spoofing SaaS Vanity URLs for Social Engineering Attacks

SaaS vanity URLs can be spoofed and used for phishing campaigns and other attacks. In this article, we’ll showcase two Box link types, two Zoom link types, and two Google Docs link type that we were able to spoof.

Social engineering (security) - Wikipedia

Types of Social Engineering Attacks in 2022

Spoofing SaaS Vanity URLs for Social Engineering Attacks

Swedish Windows Security User Group » Office 365 ATP

Social Engineering Attacks - Multipoint VAD

Swedish Windows Security User Group » Microsoft Defender for Office 365

Email Phishing Scams and How to Avoid Them

The Top 9 Cyber Security Threats That Will Ruin Your Day - Hashed Out by The SSL Store™

S12: The Evolving SaaS Cyber Kill Chain - BlueHat Oct 23 — Eightify

Adaptive Shield Updates & News Center

Box, Zoom, Google Docs offer phishing boost with 'vanity URL' flaws

Social Engineering Attacks: What You Need to Know

Top Phishing Statistics and Facts for 2019–2023

What Industries are at the Highest Risk of Phishing Attacks?

Full article: A Comprehensive Survey of Phishing Email Detection and Protection Techniques