What Is URL Phishing?

URL Phishing Definition

URL phishing is the use of emails to redirect recipients to a fake website and coerce them into divulging sensitive data, such as login credentials or financial information. The website will look deceptively familiar and legit, but its aim is to misuse your trust by “fishing” for personal information a malicious actor can use for nefarious purposes.

Overview Of URL Phishing

An estimated 15 billion spam emails are sent every day, and over 80% of organizations claim to have experienced phishing attacks at some point. Despite increased awareness, at least one-third of all phishing emails are actually opened, and in about 90% of data breaches, phishing is the root cause. No wonder most IT teams view phishing attacks as a major concern.

But what is Uniform Resource Locator (URL) phishing and how does it work? How do you identify URL phishing attacks and protect your organization?

How Does URL Phishing Work?

In its most basic form, URL phishing happens when a criminal sends someone a legitimate-looking email, which then entices the recipient to take action by clicking on a link that redirects them to what seems to be a company's official website. Once there, the unsuspecting victim will be required to enter personal or financial information.

Often, a sense of urgency, such as a fast-approaching deadline, is involved to pressure the user into meeting the perpetrator's demands. Some fake URLs actually redirect to the legitimate site after personal information has been entered. This way, the target does not immediately realize they have been duped.