Investigating LogoKit operators to send victims a personalized, specially crafted URL containing their email address. The victim email is also auto-filled into the email or username field, tricking victims into thinking it's a familiar site they've already visited and logged into. In some cases, attackers use legitimate object storage buckets, i.e., Google Firebase, which helps their operation appear less suspicious because it sends users to a domain name they recognize.

• Type Learning
• Level Intermediate
• Time Hours
• Cost Free