X.com Automatically Changing Link Text but Not URLs
Indicators of compromiseauto-extracted · verify before use · export allAll →
| Type | Indicator | Context |
|---|---|---|
| domain | fedetwitter.com | erlying URL. So if you were a clever phisher and registered fedetwitter.com, people would see the link as fedex.com, but it would send |
| domain | fedex.com | nd registered fedetwitter.com, people would see the link as fedex.com, but it would send people to fedetwitter.com. Thankfully, t |
Full article99 words · extracted from schneier.com · click to collapse
Brian Krebs reported that X (formerly known as Twitter) started automatically changing twitter.com links to x.com links. The problem is: (1) it changed any domain name that ended with “twitter.com,” and (2) it only changed the link’s appearance (anchortext), not the underlying URL. So if you were a clever phisher and registered fedetwitter.com, people would see the link as fedex.com, but it would send people to fedetwitter.com.
Thankfully, the problem has been fixed.
Tags: domain names, phishing, Twitter
Sidebar photo of Bruce Schneier by Joe MacInnis.
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.schneier.com/blog/archives/2024/04/x-com-automatically-changing-link-names-but-not-links.html