Hackers Exploits Glitch Platform to Launch Phishing URLs

Share post:

The DomainTools research team has uncovered a phishing campaign that actively exploits the Glitch platform to display short-lived phishing site URLs.

To bypass antivirus security, actors send emails with attachments to PDF documents that do not contain malicious code, but the PDFs contain a link that directs the user to a site hosted by Glitch.

A careful examination of these PDF links shows that they contain JavaScript, which is used to steal credentials to an email address after being forwarded via compromised WordPress pages. Further revelations show that Glitch is just one of several channels that the threat actors use to bypass detection and steal credentials.

Other sites where the hackers host similar documents include Heroku, SelCDN.

Glitch is a cloud hosting service that allows people to deploy apps and websites using Node.js, React and other development platforms. However, factors such as the favourable view Glitch enjoys from security platforms, short-lived URLs and the fact that threat actors could host them for free make Glitch an excellent target for abuse.

For more information, read the original story in Bleeping Computer.

Featured Tech Jobs

SUBSCRIBE NOW

Related articles

Exim issues email server update, mitigations for 6 zero-day vulnerabilities

All previous versions of Exim are obsolete, the developers warn admi

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Oct. 2, 2023 – How to create a cybersecurity awareness program

For October Cyber Security Awareness Month this episode offers tips on how to build an effective awarene

Cyber Security Today, Week in Review for the week ending Friday, Sept. 29, 2023

This episode features discussion on October Security Awareness Month, ransomware, teenage hackers and the start of hearings into proposed Canadian privacy a

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways