Tycoon phishing kit uses sneaky new techniques to hide malicious links

Phishing emails often feature malicious links (URLs) that lead victims to fake websiteswhere they are infected with harmful software or tricked into giving away personalinformation. There’s a constant battle between security tools getting better at identifying bad links and attackers trying to hide them more effectively. Barracuda has uncovered some of the latest approaches its researchers are seeing in attacks involving the advanced phishing-as-a-service (PhaaS) kit, Tycoon. The analysts have found Tycoon using URL encoding techniques to hide malicious links in attacks leveraging a trusted accounting service. These include inserting a series of invisible spaces into the web address (using… [Continue Reading]