Threat Actors Use ClickFunnels to Bypass Security Services

guest · Feb 2, 2023

By Alessandro Mascellino @a_mascellino - February 2, 2023

Threat actors have been spotted using the legitimate ClickFunnels service to bypass security services and redirect users to malicious links.
Click to expand...

Security researchers at Avanan, a Check Point Software company, discussed the findings in an advisory shared with Infosecurity and published earlier today.

"ClickFunnels is an online service that helps entrepreneurs and small businesses generate leads, build marketing engines and grow their businesses," wrote Avanan marketing content manager Jeremy Fuchs. "Hackers, however, are using it to bypass security services."
Click to expand...

More specifically, threat actors have been exploiting ClickFunnels' ability to create pages with malicious links and ultimately conduct credential-harvesting attacks.

"We talk constantly about 'The Static Expressway.' This is the practice of leveraging legitimate sites to host and send malicious pages," Fuchs wrote. "Essentially, it's a way of hiding malicious intent in something legitimate."
Click to expand...

Case in point, ClickFunnels is a platform generally trusted by security engines. Therefore, links delivered by its email manage to bypass email protection solutions.

"We've seen this time and time again. Whether it's using AWS, Microsoft Voice or Facebook, this is a powerful way to get into the inbox," Fuchs added.
"It utilizes the fact that security services can't outright ban popular sites. Hackers then hop on the back of these to get into the inbox and scam users."
Click to expand...

Avanan: Leveraging ClickFunnels to Bypass Security Services

By Jeremy Fuchs - February 2, 2023
ClickFunnels is an online service that helps entrepreneurs and small businesses generate leads, build marketing engines and grow their businesses.

Hackers, however, are using it to bypass security services.
Click to expand...

Because ClickFunnels offers the ability to easily create web pages, hackers are taking advantage of that to create pages with malicious links.

In this attack brief, researchers at Avanan, a Check Point Software Company, will discuss how threat actors are using a legitimate service for bad purposes.
Click to expand...

Log in or Sign up

Threat Actors Use ClickFunnels to Bypass Security Services

guest Guest

Log in or Sign up

Threat Actors Use ClickFunnels to Bypass Security Services

guest Guest

Useful Searches