Would You Click?
catalonia.citizenlab.ca
catalonia.citizenlab.ca
To any designers out there, really ask yourself if you can engineer better scrolling than what is built into our devices already. Maybe 10 years ago you could have and it would be easy, but web browsers on every platform are pretty good right now in terms of handling our inputs.
Edit: all the way at the bottom there's a link to the full report: https://citizenlab.ca/2022/04/catalangate-extensive-mercenar...
I could have gone further and unpacked the code, beautifying it to see what 0 day it was leveraging, but I didn't proceed further. Obviously, this was designed to take over my device. Luckily, my default browser is Firefox with JavaScript turned off, so it wouldn't have been able to execute if I did click on the link.
To get the last URL in a redirect chain with `curl`:
curl --silent --location --output /dev/null --write-out '%{url_effective}' 'URL HERE'As someone who is responsible for abuse reports, one of the things I like about services such as hybrid-analysis, joe's sandbox, urlscan.io etc is that I can get some info about a link without having to worry about my local computer or maintain a sandbox.
Also, a lot of sketch URLs belong to 'booters' and exist only to collect the IP address of whatever connects to them so someone can ddos it later.
https://citizenlab.ca/2022/04/catalangate-extensive-mercenar...