Skip to content

Living off Trusted Sites

Named by 2 kept items in this workspace.

Search every workspace for Living off Trusted Sites. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Fake Refund Scam Hits Shopify Shop App Users
    writeup2026-08-13It is written here as Living off Trusted Sites (LoTS).

    Technique where phishing abuses a legitimate trusted platform (here Shopify's own notification pipeline, previously seen with Dropbox, Canva, Docusign) to deliver content that appears native to that platform, avoiding red flags associated with attacker-owned infrastructure.

  • Phishing Techniques Spotted: Email Examples & Red Flags
    article2026-03-16It is written here as Living off Trusted Sites (LoTS).

    Phishing email leads victim first to a legitimate trusted site (e.g., Figma, Dropbox, Canva, Docusign) before redirecting to a malicious landing page, evading initial red flags

All techniques in this workspace.