Technique Payload Delivery

Malicious Link

The message includes a link and makes opening it the next step. A link can lead to a sign-in page, a download, or a form, and where it really goes isn't always visible from the message.

Also known as

Aliases: Spearphishing Link

phishing link

Mapped to

MITRE ATT&CK®

T1566.002Spearphishing Link T1598.003Spearphishing Link

Sub-techniques

TE0006.1 Open Redirect Abuse

The link starts on a legitimate website and uses its redirect feature to forward visitors to a different address. Starting on a real site makes the link look safe and can help it get past link filters.

TE0006.2 URL Shortening

The link uses a link-shortening service, such as bit.ly, which replaces the full web address with a short one. The short version hides where the link leads until it's opened.

Connected in PH!SH

Themes

TH0001Media Service Impersonation TH0002Email Service Impersonation TH0003Cryptocurrency Service Impersonation TH0004Travel Service Impersonation TH0005Document Sharing Service Impersonation TH0006Logistics Service Impersonation TH0008Social Media Service Impersonation TH0013Advance Fee Scheme TH0014Deceptive Product or Service Offer TH0019Voicemail Notification TH0020Fax Notification TH0021Survey or Feedback Request TH0025Website and Domain Hosting Service Impersonation TH0027Telecommunications Service Impersonation TH0028Benefits Service Impersonation TH0029Collaboration Platform Impersonation TH0030Utility Service Impersonation TH0031Apple Impersonation TH0032Google Impersonation TH0033Storage Quota Warning TH0034Password Expiration Notice TH0036Account Suspension or Deletion Notice TH0037Suspicious Sign-In Alert TH0038Security Update Notice TH0039Account Details Update TH0041Secure Message Notification TH0042Meeting or Event Notice TH0045Account Verification Request TH0047Email Delivery Failure Notice TH0048Health Service Impersonation TH0051Technical Support Pretext TH0056Employment Terms and Compensation Notice TH0057Workplace Policy or Training Acknowledgment TH0058Adverse Employment Notice TH0059Document Review or Signature Request TH0060Customer Support Case or Complaint TH0061Copyright or Platform Policy Violation Notice TH0062Retail and Marketplace Service Impersonation TH0063Educational Institution Impersonation TH0064Electronic Signature Service Impersonation TH0065Job Portal Impersonation TH0067Adult Content or Services Offer TH0069Data Breach Notice TH0070Insurance Service Impersonation TH0072Loyalty Rewards Notice TH0073Team or Task Assignment Notice