020

Researchers uncovered a phishing campaign that leverages Google Drawings to host clickable graphics and a chain of URL shorteners (WhatsApp l.wl.co then qrco.de) to obfuscate links leading to an Amazon lookalike page that harvests credentials and credit card data; the report also describes a CSS-based loophole in Microsoft 365 that can hide the 'First Contact Safety Tip', increasing the likelihood of users engaging with such phishing emails.