Ebooks.zip 🎉

The "window" looks like it has a list of PDF or EPUB files. When you click one to "open" it, you are prompted to enter your Microsoft or Google credentials or download an executable ( .exe ) file that installs malware on your system. Why This Works (and Why It’s Scary)

While "ebooks.zip" might sound like a simple folder of digital books, it is frequently associated with modern and the rise of .zip top-level domains (TLDs) . In 2023, Google introduced several new TLDs, including .zip , which allowed anyone to register websites ending in that extension. This has created a significant phishing risk, as a link that looks like a file name—such as ebooks.zip —could actually be a link to a malicious website designed to steal credentials or deliver malware. Ebooks.zip

In the age of instant downloads, we’ve all been conditioned to click. We see a link for Summer_Reading_List.zip or Ebooks.zip and our brain immediately thinks: "Ah, a folder of books." But thanks to recent changes in how the internet works, that click could be far more dangerous than you think. The "window" looks like it has a list of PDF or EPUB files

Below is a draft blog post addressing this topic from a security-awareness perspective. In 2023, Google introduced several new TLDs, including