Sophisticated Phishing Attack Uses Random UUIDs to Bypass Email Security

New phishing campaign uses UUIDs to bypass email security, creating fake login pages that mimic company branding.

Oct 26, 2025

ON THIS PAGE

Cybercriminals have developed a new phishing campaign that uses randomly generated Universal Unique Identifiers (UUIDs) to slip past Secure Email Gateways undetected. Discovered by Cofense researchers in February 2025, the attack hides malicious JavaScript in fake file-sharing documents from platforms like OneDrive and DocuSign.

When victims click these documents, the script randomly selects from nine bulk-generated .org domains and creates unique UUIDs to track each target. Instead of typical redirects that change URLs, it uses sophisticated DOM manipulation to replace webpage content in real-time, creating personalized login pages that match the victim's company branding.

This server-driven approach makes the phishing pages look incredibly legitimate, significantly increasing the chances victims will enter their credentials.

Source: Cybersecurity News

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?