Interview with Cybersecurity Expert Andrii Koval
Shortened links are widely used on the internet, especially on social media, to make URLs more concise and manageable. However, they can pose significant cybersecurity risks, as users cannot immediately see where the link leads. Cybercriminals often exploit this by directing unsuspecting users to malicious websites designed to steal personal information, spread malware, or conduct phishing attacks.
Andrii Koval: Thank you for having me! Shortened links are created using services like Surl.li, Bit.ly, TinyURL, or Rebrandly. They are convenient, particularly for social media, where saving space is important. However, the problem is that when we see such a link, we don’t know where it leads. It could be a safe website, but it could also be a harmful site containing viruses, phishing pages, or even platforms designed to steal personal data.
How can users identify a dangerous shortened link?
Andrii Koval: There are several key methods:
Check the link before opening it. Some shortening services allow you to preview the original URL. For example, with surl.li, you can add a “+” sign at the end of the link (e.g.,
surl.li/aaa+).Use online URL expansion services. Websites like Unshorten.it, CheckShortURL, Unshorten tools from Surl.Li help reveal the full destination of a shortened link.
Scan the link using security services. Some antivirus tools, like Norton or Kaspersky, allow you to scan URLs before clicking on them.
Be cautious about the link’s context. If you receive a shortened link in a message from a stranger or even a friend without an explanation, avoid clicking it. Your friend’s account may have been compromised.
Use browser extensions. There are add-ons that automatically check links for security, such as Link Expander or Web of Trust (WOT).
What are the signs that a shortened link leads to a fraudulent website?
Andrii Koval: If you do click on a link, watch for these warning signs:
A suspicious or misspelled domain name (e.g., “faceb00k.com” instead of “facebook.com”).
Immediate requests for login credentials, passwords, or banking details.
The absence of a secure connection (HTTPS) in the browser.
Pop-ups with messages about fake winnings, urgent virus warnings, or suspicious promotions.
A website that looks like a well-known platform but has distorted design or logos.
What should someone do if they have already clicked on a dangerous shortened link?
Andrii Koval: First, do not enter any personal information. If the page has already asked for a password or other data, change it immediately on the official website. Second, scan your device with antivirus software. If you downloaded a file, do not open it—delete it right away and run a security check on your system.
What are your key recommendations for staying safe from dangerous links?
Andrii Koval: The main rule is to stay vigilant. Do not open shortened links from unknown senders. Use verification tools, keep your antivirus software and browser updated, and always think twice before clicking on a suspicious link!
Thank you for the valuable information!
Andrii Koval: You’re welcome! Stay safe and protect your data!