Figma · shared design file
RFQ Documentation, Q3 2026
A shared workspace file used as a staging point in the thread-hijack story. Attackers stage lures on trusted collaboration platforms so the first hop looks legitimate. This is a fabricated, inert page dressed as a Figma file; the host is a Sublime demo site.
Quote PackFrame · 1440×1024
Remittance AdviceFrame · 1440×1024
Delivery ScheduleFrame · 1440×1024
Bank DetailsFrame · 1440×1024
| Shared by | Avery Demo (fictional) |
|---|---|
| Last edited | Today |
| Access | Anyone with the link can view (lure wording) |
Primary link in the vendor thread hijack sample, shown as a direct Figma-style file URL on the controlled host. The rule keys on the thread, the trusted sender, the banking-change language and the platforms named in the text, not on this page.