extracts all the Ow.ly links, once an abuse report is identified, corrects them as needed (some reports modify links so phishing links are not propagated further).runs every five minutes and scans our abuse inbox for new reports.Using this platform, we created a function that performs a few steps: To reach this goal, we decided to use Google App Script as it allows integration with Google Workspace products used by Hootsuite, particularly Gmail.Īpp Script, which is essentially Javascript hosted by Google, provides us with great flexibility and ease of use because it can seamlessly fetch and process emails sent to our abuse inbox. The objective was to delete all reported links from a verified source in less than five minutes with a script that requires minimal maintenance.
Owly social media manual#
To accelerate this process, we needed a way to automate the manual process so that we can respond quickly and efficiently. Lastly, our team investigates, takes the links down, and closes the incident.Ī sample abuse report sent to by PhishLabs.Third-party abuse reporters send a message to our team (see image below).Many people receive these phishing/spam emails and some file a complaint to their ISP, SaaS provider or directly to Hootsuite and ask the link to be taken down.Attackers then distribute these Ow.ly links via email or social media.
Owly social media free#
In this article, we will cover both the reactive and the proactive automation approaches we took to significantly improve our process of handling malicious Ow.ly links and how it lifted the burden off the shoulders of our Customer Support and Security Incident Response teams at Hootsuite. Due to the volume and frequency of these abuse reports, our team would spend countless extra hours closing these tickets. The IR team had a manual review process that involved reviewing and deleting malicious links which was time-consuming. We created a security incident for each abuse report, and assigned them to our Security Incident Response team. Our original process for removing Ow.ly links reported as malicious was very manual. Cost, time, scalability, and brand reputation are just a few of the challenges that arise when handling abuse cases. When this happens, Hootsuite receives complaints from recipients of these phishing activities and many abuse monitoring organizations.
As with many other popular tools, this service is frequently abused by malicious actors to anonymize and spread phishing and spam content to unsuspecting recipients. Ow.ly is a popular link shortening service that allows Hootsuite service users to shorten links in a post prior to publishing it on social media. Authors: Faheem Khan, Mahdi Fadaee and Cuneyt Karul Introduction
0 kommentar(er)
