Open redirect: HHS | Sublime Security

Sublime Core Feed
Open redirect: HHS
Sublime Core Feed
Login to Sublime
Medium Severity
Open redirect: HHSLabelsCredential Phishing
Malware/Ransomware
Open redirect
Sender analysis
URL analysis
DescriptionLooks for use of the HHS open redirect.
Referenceshttps://www.bleepingcomputer.com/news/security/hhsgov-open-redirect-used-by-coronavirus-phishing-to-spread-malware/
Sublime Security
Created Aug 17th, 2023 • Last updated Aug 21st, 2023
Feed Source
Sublime Core Feed
Source
GitHub
type.inbound
and any(body.links,
        .href_url.domain.domain == 'dcis.hhs.gov'
        and strings.ilike(.href_url.query_params, '*service*')
)
MQL Rule Console
•Docs•Learning Labs
PlaygroundTest against your own EMLs or sample data.
SharePost about this on your socials.
Get Started. Today.Managed or self-managed. No MX changes.
Get Started
Deploy and integrate a free Sublime instance in minutes.
Get Started