IPFS phishing and the need for correctly set HTTP security headers, (Wed, Mar 15th)

Web: https://malware.news/t/ipfs-phishing-and-the-need-for-correctly-set-http-security-headers-wed-mar-15th/67894

In the last couple of weeks, I’ve noticed a small spike in the number of phishing messages that carried links to fake HTML login pages hosted on the InterPlanetary File System (IPFS) – an interesting web-based decentralized/peer-to-peer data storage system. Unfortunately, pretty much any type of internet-connected data storage solution is used to host malicious content by threat actors these days, and the IPFS is no exception. In fact, it seems to have been used to host phishing pages since …

headers http ipfs phishing security security headers