"Attackers Hide Behind Trusted Domains, HTTPS"

A new report from Webroot brings further attention to the use of HTTPS domains to host phishing attacks. Hypertext Transfer Protocol Secure (HTTPS) is the secure version of HTTP that uses the Transport Layer Security (TLS) protocol to secure connections between browsers and web servers in order to prevent the eavesdropping of users' private information, including passwords and web searches. The presence of "https" and a green padlock symbol in a browser's address bar gives users a false sense of security as there is no guarantee that the information encrypted and securely delivered by HTTPS is going to a safe destination. This article continues to discuss the use of trusted domains and HTTPS by attackers in addition to the increased targeting of older operating systems and the rise in malware variants.

Dark Reading reports "Attackers Hide Behind Trusted Domains, HTTPS"