Phishing Attack Uses Blob URLs and Microsoft Services to Evade Detection

A new phishing technique leverages trusted Microsoft services and blob URLs to create malicious pages entirely within the victim's browser, leaving no static site for defenders to block. The attack evades traditional URL reputation and takedown efforts, marking a shift in phishing infrastructure. The full scope and targeting remain unclear, but the method's stealth suggests increased difficulty for enterprise defenses.