SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
SANS Stormcast Tuesday, April 22nd: Phishing via Google; ChatGPT Fingerprint; Asus AI Cloud Vuln; PyTorch RCE
Apr 22, 2025
05:35
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Phishing attacks exploit Google’s advertising services to persistently deliver malicious links despite detection attempts by security systems.
- The discovery of invisible Unicode characters in ChatGPT documents raises concerns about potential tracking and academic integrity risks.
Deep dives
Phishing Vulnerability Through Webmail Forms
A straightforward phishing attack is highlighted, demonstrating how attackers utilize webmail forms to steal email credentials. This specific scheme employs a notification of email failure to lure users into clicking on phishing links, directing them to a dynamic IP address. The attack is facilitated by Google’s DoubleClick.net system, making it easier for malicious sites to reach potential victims. Despite the site being flagged by VirusTotal, which is also managed by Google, the existence of such a blatant phishing route raises concerns about the effectiveness of current protective measures.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
