Rise in Abuse of Cloudflare Developer Domains Reported

Cloudflare’s developer domains face significant abuse by cybercriminals. Cybersecurity firm Fortra reports a dramatic rise in the misuse of Cloudflare’s ‘pages.dev’ and ‘workers.dev’ domains for phishing and other malicious activities, with incidents increasing by 100% to 250% compared to 2023. The report highlights a 198% surge in phishing attacks on Cloudflare Pages, with incidents expected to exceed 1,600 by year-end. Similarly, phishing attacks on Cloudflare Workers have risen by 104%, with projections nearing 6,000 incidents. Cybercriminals exploit Cloudflare’s trusted reputation to enhance the effectiveness of their campaigns, utilizing tactics like “bccfoldering” to obscure the scale of their operations. Users are advised to verify URLs and enable two-factor authentication to protect against these threats.