Analytics BIOC
Informational
✕
Email with URL shortener detected
A URL shortener was detected in the email body.
- Module:
- Email Security
- Licensed by:
- Email Security
- Data source:
- Microsoft 365 Emails
ATT&CK tactics: Defense Evasion (TA0005)
ATT&CK techniques: Hide Artifacts (T1564)
Detector tags: Malicious URLs
Attacker's goals:
Attackers use URL shorteners to hide the true destination of a link, making it easier to trick recipients into clicking on it.
Investigative actions:
Examine the sender's IP ֿֿaddress and reputation. Verify whether the sender's IP address has appeared in different log sources before, and if it is recognizable. If the message contains attachments or links, scrutinize them for any suspicious indications. Monitor further actions taken, such as file downloads or access to potentially malicious links.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Hour 30 Minutes