Researchers discover new custom web font phishing attack
Fri 4 Jan 2019
Proofpoint observes novel technique that uses custom web fonts to help phishing pages evade detection
Cybersecurity researchers at Proofpoint have discovered a new phishing technique that allows cybercriminals to hide phishing pages via custom web font files.
The researchers found the new technique after observing strange encoding in a credential harvesting scheme impersonating a major retail bank. A credential harvesting scheme is a common phishing scheme that involves tricking users in….