Domain Redirection Attacks: Wrong Turns in Cyberspace

This report details domain redirection attacks leveraging open redirect vulnerabilities to redirect users from trusted domains (notably apiservices.krxd.net) to attacker-controlled phishing sites (notably techadda.co.in) presenting fake Microsoft login pages to harvest credentials; it highlights affected sectors, observed campaign activity, indicators, and recommended mitigations for web assets and user security (inventory, WAFs, URL allowlists, 2FA, email security and user training).