HashJack: A New Attack That Fools AI Browsers With a Simple ‘#’

URL fragments, the portion after the '#' symbol, are processed entirely on the client side and never sent to servers or network monitoring tools.

Cyber Security News

Our customer-surveillance have seen a high increase in unsubscribe mails from Mailchimp.
Problem is that the unsubscribed email addresses have never been subscribed to any of the customers #mailchimp lists.

All links, etc. in the email, look legit and point to verified Mailchimp servers.
Are there any new attacks that can somehow abuse this? or why is this suddenly happening?

#infosec #mailchimp #unsubscribe #newAttack