IPFS phishing and the need for correctly set HTTP security headers, (Wed, Mar 15th)

In the last couple of weeks, I’ve noticed a small spike in the number of phishing messages that carried links to fake HTML login pages hosted on the InterPlanetary File System (IPFS) – an interesting web-based decentralized/peer-to-peer data storage system. Unfortunately, pretty much any type of internet-connected data storage solution is used to host malicious content by threat actors these days, and the IPFS is no exception. In fact, it seems to have been used to host phishing pages since …

data data storage decentralized fake file file system headers host html http internet interplanetary file system ipfs links login malicious messages peer-to-peer phishing security security headers solution storage system threat threat actors web