New BlobPhish Attack Steals Credentials, Evades Security Tools
Why it matters: Indian organizations, especially those utilizing Microsoft 365 and online financial services, must be aware of this advanced phishing technique that bypasses conventional security measures.
A sophisticated, memory-resident phishing campaign named BlobPhish is actively exploiting browser Blob URL APIs to silently steal user credentials. This attack, active since October 2024, targets Microsoft 365 users and major financial platforms. BlobPhish is particularly dangerous as it remains almost completely invisible to traditional security tools, fundamentally changing phishing page delivery.
Source: Cybersecurity News