Unveiling Sophisticated Phishing Attacks using SendGrid's Identity

Robert Duncan from Netcraft is sharing their research on "Phishception - SendGrid abused to host phishing attacks impersonating itself." Netcraft has recently observed that criminals abused Twilio SendGrid’s email delivery, API, and marketing services to launch a phishing campaign impersonating itself. 

Hackers behind this novel phishing campaign used SendGrid’s Tracking Settings feature, which allows users to track clicks, opens, and subscriptions with SendGrid. The malicious link was masked behind a tracking link hosted by SendGrid. 

Please take a moment to fill out an audience survey! Let us know how we are doing!

The research can be found here:

• Phishception – SendGrid is abused to host phishing attacks impersonating itself

Learn more about your ad choices. Visit megaphone.fm/adchoices