Editing Computer security (section)

===HTML smuggling===
[[HTML]] smuggling allows an attacker to ''smuggle'' a malicious code inside a particular HTML or web page.<ref name="Intelligence-2021">{{Cite web |last=Intelligence |first=Microsoft Threat |date=2021-11-11 |title=HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks |url=https://www.microsoft.com/en-us/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks/ |access-date=2023-12-07 |website=Microsoft Security Blog |language=en-US}}</ref> [[HTML]] files can carry payloads concealed as benign, inert data in order to defeat [[content filter]]s. These payloads can be reconstructed on the other side of the filter.<ref>{{Cite web |title=Obfuscated Files or Information: HTML Smuggling, Sub-technique T1027.006 – Enterprise {{!}} MITRE ATT&CK® |url=https://attack.mitre.org/techniques/T1027/006/ |access-date=2023-02-22 |website=attack.mitre.org}}</ref>

When a target user opens the HTML, the malicious code is activated; the web browser then ''decodes'' the script, which then unleashes the malware onto the target's device.<ref name="Intelligence-2021" />