THE WIKI-SLACK ATTACK

Summary from the TLDR InfoSec newsletter

Researchers are calling attention to the Wiki-Slack attack, a new technique that uses modified Wikipedia pages and relies on a formatting error when the page is rendered in Slack. To mount the attack, a threat actor would first need to select a Wikipedia article that might be of interest to an intended target, modify it to add a legitimate footnote at the end of the first paragraph, and then share the article in Slack, leading them to an attacker-controlled website where browser-based malware lays in wait.