Proxying Trust

During routine monitoring of malicious web activity on the urlscan platform, the urlscan Threat Research Team identified a phishing campaign abusing the Ultraviolet (UV) client-side proxy framework. This framework was being leveraged to obscure attacker infrastructure, evade traditional detection methods, and deliver high-fidelity credential harvesting content. This brief provides a technical analysis of how threat actors repurpose client-side proxy frameworks like Ultraviolet and its successor