X (Twitter) DM Lure Followed by Rapid Google Docs Navigation

Ibrahim Saud@tektrix

•updated 17 days ago•0•0•1

Detects a suspicious sequence of user activity where a device visits a social media platform (Twitter/X) followed shortly by navigation to a Google Doc. This pattern is often consistent with phishing lures where victims are enticed via direct messages or social engineering to open a malicious document hosted on Google Docs.