Phishing Risks Rise as Zendesk Subdomains Facilitate Attacks

CloudSEK warns that Zendesk's free-trial subdomain registration and absent email verification enable attackers to register brand-like subdomains and craft convincing support emails and Help Center pages to conduct phishing and investment scams; 1,912 matching subdomains were identified, and mitigations recommended include blacklisting unfamiliar Zendesk subdomains, deploying phishing/URL detection, and regular employee training — no active campaigns have been observed but organizations are advised to act proactively.