Analytics BIOC
Informational
✕
Email containing a redirected link
An email with a redirected link has been detected.
- Module:
- Email Security
- Licensed by:
- Email Security
- Data source:
- Microsoft 365 Emails
ATT&CK tactics: Defense Evasion (TA0005) Execution (TA0002)
ATT&CK techniques: Hide Artifacts (T1564) User Execution (T1204)
Detector tags: Malicious URLs
Attacker's goals:
Attackers can use link redirection to disguise malicious URLs.
Investigative actions:
Carefully analyze the full redirection chain. Be cautious with this process, as clicking on links can pose security risks. Use URL reputation services to check if the final destination or any of the intermediate URLs are known to be malicious or associated with phishing. If the message contains attachments or links, scrutinize them for any suspicious indications. Monitor further actions taken, such as file downloads or access to potentially malicious links.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day
1 variation:
- Email containing a redirected link with multiple redirections Informational