Jira Abuse With Suspicious Redirector Link

Tim Peck@timpeck

•updated Feb 18, 2026•9•1•71

Detects incoming emails from Atlassian Jira domains (atlassian.net) that contain suspicious link redirectors or known Traffic Distribution Systems (TDS) like Keitaro. This activity is associated with a campaign where threat actors abuse Jira's trusted domain to send spam and phishing emails.