New Phishing Attack Bypasses Using UUIDs Unique to Bypass Secure Email Gateways

**Sophisticated UUID-driven phishing campaign leveraging dynamic DOM replacement:** A phishing operation uses randomly generated UUIDs and randomly selected bulk-generated domains embedded in HTML attachments or spoofed file-sharing platforms (OneDrive, SharePoint, DocuSign, Adobe Sign) to bypass Secure Email Gateways; the malicious script posts victim context to a server which returns branded login pages and replaces page content via DOM manipulation (no redirect) to harvest credentials, with Cofense reporting active use in early February 2025.