Watch out: Instagram users targeted in novel phishing campaign

This report describes a phishing campaign targeting Instagram users that forgoes traditional malicious links in favor of mailto: links and typosquatted email domains to evade URL reputation checks and harvest account access via direct email replies; researchers observed multiple suspect addresses hosted on the same IP and provide examples, analysis of attacker motivation, and user-focused mitigation advice.