Researchers from Akamai reported today that Google Analytics is being abused by phishing scammers.
Analytics markers can help fraudsters track victims and dupe them into visiting malicious domains – but can also light the way for defenders.
News Insights: According to Colin Bastable, CEO of security awareness and training company Lucy Security:
“Cyber attackers often make use of commercially available tools and techniques as well as their Dark Web kits. For example, the browser companies have forced website owners to deploy certificates, because of “security”. So the bad guys add certs, enabling people to be robbed securely. Likewise, Google Analytics is incredibly useful. Hackers are highly motivated and often smarter than the people who build defensive security technology. So it makes sense that they use Google Analytics.”