https://insinuator.net/tags/phishing/ Recent content in Phishing on Insinuator.net - Bold Statements Hugo en-us Fri, 23 Nov 2018 00:00:00 +0000 https://insinuator.net/2018/11/plume-twitter-client-url-spoofing/ Fri, 23 Nov 2018 00:00:00 +0000 https://insinuator.net/2018/11/plume-twitter-client-url-spoofing/ <p>It is possible to spoof the URLs that Plume will open to arbitrary locations because of how Plume parses URLs. The preview of an URL in a tweet will show the complete (at least the host name and the first few chars of the URL) but shortened URL. However, if the URL contains a semicolon (;) the URL that will be opened is the part after the semicolon.</p> <p>An attacker can make use of this behavior by specifying a URL like the following in a Tweet or direct message:</p>