Cybersecurity firms combat phishing via new tools and Microsoft service exploits

Cybersecurity firms are addressing evolving phishing threats through new tools and detection reports. Malwarebytes has launched ‘Scam Link Check’, a free browser-based service designed to help users verify suspicious web addresses before clicking. The tool categorizes links as safe, dangerous, or unknown, providing a reasoning and a screenshot of the target page to increase transparency. It analyzes URLs for signs of phishing, malware, and complex redirection chains without requiring software installation.

Separately, Kaspersky has identified a campaign involving over 31,000 fraudulent emails that exploit legitimate Microsoft services to increase credibility. Attackers are utilizing Microsoft Entra by registering their own applications and using controlled websites as redirect URIs. This allows them to send emails containing genuine Microsoft redirection links that lead victims to malicious sites for data theft or malware downloads after authentication. Security experts note that using trusted infrastructure makes these attacks significantly harder to detect than traditional phishing attempts.