EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 5·5 min read
Phishers are hijacking legitimate cloud infrastructure
TL;DR
Phishers are increasingly using legitimate cloud services like Cloudflare and GitHub Pages to host phishing sites, exploiting their trust and anonymity. This trend complicates detection efforts for security vendors.
✦ Why It Matters
Review your cloud service usage policies to mitigate risks from potential phishing attacks.
Key Takeaways
- Be cautious with unexpected requests from reputable domains.
- Treat CAPTCHA requests for personal data as potential scams.
- Inspect the true URL in the browser's address bar.
- Avoid entering credentials in unexpected pop-up windows.
How It Works
Phishers use a multi-stage AitM attack that begins with a phishing email leading to a fake CAPTCHA page. This page collects email addresses and initializes a service worker that intercepts network requests, allowing attackers to capture login credentials through a spoofed interface that mimics legitimate sites.