Phishing Threat From New .zip Top-Level Domain

Arctic Wolf warns that Google's newly available .zip top-level domain is being abused in phishing campaigns because domains can appear as familiar file names (for example, "update.zip"). The advisory notes observed phishing activity using .zip domains, recommends blocking or restricting the TLD at network/DNS/proxy layers, increasing monitoring for related TTPs, and providing targeted user awareness training to reduce successful social engineering.