IPFS peer-to-peer file storage network is being used in an increase of phishing attacks
The InterPlanetary File System (IPFS) is a peer-to-peer (P2P) network.
The goal is to build a robust distributed file system that allows data to be stored on multiple computers.
In the last three months, 3,000 emails containing IPFS phishing URLs have been identified as an attack vector.
Researchers concluded that phishing techniques have advanced by utilising the concept of decentralised cloud services via IPFS.
These domains prompt potential victims to enter their credentials to view a document, track a package on DHL, or renew their Azure subscription, only to steal their email addresses and passwords and send them to a remote server.
The findings coincide with a broader shift in the email threat landscape, with Microsoft’s plans to block macros forcing threat actors to change their tactics.