You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
link wrapping exploits
About this tag
Link wrapping exploits refer to a sophisticated cyberattack technique where criminals manipulate URL rewriting services—such as those from Proofpoint and Intermedia—designed to protect email users. Instead of blocking threats, attackers hijack these link-wrapping features to disguise malicious URLs, leading victims to fake Microsoft 365 login pages. This method has been used in large-scale phishing campaigns, notably between June and July 2025, to steal credentials and compromise enterprise accounts. The tag covers discussions on how these exploits turn trusted security tools into attack vectors, the mechanics of link-wrapping abuse, and the resulting risks for Microsoft 365 users.
Cybercriminals have developed a sophisticated method to compromise Microsoft 365 accounts by exploiting link-wrapping services, notably those provided by Proofpoint and Intermedia. This technique involves manipulating the very tools designed to protect users, thereby increasing the effectiveness...
A new wave of cyberattacks has exposed a dangerous flaw in trusted email security services, as hackers have successfully exploited protective link-wrapping features to orchestrate large-scale phishing campaigns targeting Microsoft 365 logins. By hijacking the mechanisms designed to keep users...
A sophisticated phishing campaign exploiting trusted email security tools has rattled the cybersecurity landscape, exposing a dismally clever strategy that turns protective mechanisms into attack vectors. Between June and July 2025, researchers at Cloudflare uncovered an operation wherein...