the true links they are sendingAttack.Phishingin spear phishing emails . A number of samples analysed were linked via the URL shortening service “ bit.ly ” . The URL shortening service then redirects users to the malicious payload hosted on attacker controlled pages . Another method favoured by the attackers was the setting upAttack.Phishingof fake news sites