Vercel Platform Abused for Phishing Campaigns | MSSP Advisory

Attackers are exploiting Vercel's serverless hosting platform to launch phishing campaigns, taking advantage of its legitimate *.vercel.app domains to bypass email security filters. The campaigns target credential harvesting by hosting convincing phishing pages that inherit Vercel's reputation and SSL certificates. Cofense reports this represents a significant uptick in abuse of the platform's free hosting tier.

Your email security stack likely trusts Vercel domains by default, creating a blind spot that attackers are now exploiting at scale. Clients expect you to catch phishing before it hits their users, but these campaigns slip through because security tools see legitimate infrastructure hosting malicious content.

📬