Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection

guest · Jan 10, 2019

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection
January 10, 2019
https://thehackernews.com/2019/01/phishing-zero-width-spaces.html

Security researchers have been warning about a simple technique that cybercriminals and email scammers are already being using in the wild to bypass security features of Microsoft Office 365, including Safe Links, which are originally designed to protect users from malware and phishing attacks.

According to the researchers, attackers are simply inserting multiple zero-width spaces within the malicious URL mentioned in their phishing emails, breaking the URL pattern in a way that Microsoft does not recognize it as a link.

"Microsoft email processing did not recognize this URL as a legitimate URL, and neither applied URL reputation checking nor converted it with Safe Links for post-click checking," the researchers say in a blog post published Wednesday.
The security firm discovered the Z-WASP attack on more than 90 percent of Avanan's Office 365 customers and reported the issue to Microsoft on November 10th last year after confirming its nature.
Click to expand...

Log in or Sign up

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection

guest Guest

Log in or Sign up

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection

guest Guest

Useful Searches