"A Basic Text-Color Trick Can Fool Phishing Filters"

Researchers at Avanan have discovered evidence of a phishing campaign that uses a trick involving text color in an email. The phishing emails include text that is covered in white that hides from the end-user and evades phishing filters. This technique is said to be the latest version of what phishing campaigns do to show different things to the end-user and the filter. The attackers can add nonsense text strings that obfuscate what otherwise appears to be a typical phishing email that many email providers would likely immediately send to the trash. Like other similar campaigns, the goal is to trick the recipient into visiting a fake webpage or calling a phone number in order to harvest their credentials. Avanan noted that similar techniques in the past have involved using tiny font sizes. This article continues to discuss Avanan's findings regarding a text color trick being used in a phishing campaign to evade phishing filters. 

CyberScoop reports "A Basic Text-Color Trick Can Fool Phishing Filters"