Phishing Attacks Continue to Leverage URL Shorteners to Obfuscate Malicious Links

Researchers have observed a wave of phishing campaigns leveraging legitimate URL shortening services (e.g., bit.ly) to obfuscate malicious links and bypass solutions that treat shortlinks at face value; attackers may be compromising shortlink service credentials. Recommended mitigations are security tools that traverse and scan final link destinations and continual security awareness training for users.