Healthcare Phishing via HolaBrief/LoopedIn SaaS Open-Redirect from Browser

Ibrahim Saud@tektrix

•updated Jun 28, 2026•1•0•4

Detects endpoint browser and email client processes initiating network connections to domains and IP addresses associated with HolaBrief and LoopedIn open-redirect infrastructure, commonly leveraged in invoice-themed phishing campaigns.