A malicious link is a URL crafted to send a victim to attacker-controlled content, such as a fake login page, a malware download, or a site that collects credentials and wallet secrets. The link may look normal at first glance, but the destination is designed to harm the user or the organization.
Malicious links matter because they are one of the simplest and most effective phishing tools. Attackers place them in email, chat, ads, QR codes, or fake support messages to turn a single click into credential theft, session hijacking, or further social engineering. Defenders reduce the risk with link filtering, domain reputation checks, sandboxing, and user training that emphasizes verifying unexpected requests through a separate channel. In practice, the link is often the moment a campaign moves from delivery to compromise.