Threat actors have done this before, such as, when they set up a fake Microsoft Outlook login page to capture their targets’ Microsoft account usernames and passwords. They’ve also targeted remote workers that access their Office 365 accounts via VPNs.
Fake Office 365 login page, spoofed Zoom email
In the phishing attack that Abnormal Security reports, hackers targeted remote workers that that have Zoom and Office 365 accounts. First, they spoof the official Zoom email address, from which they send phishing emails to their targets. But they’re targeting the employees’ Office 365 login credentials in the end. Each phishing email notifies the recipient to click a provided link or lose access to their Zoom account. As you’d expect with any such attack, clicking the link doesn’t lead to a legitimate Zoom site. Instead, it eventually takes the target to a fake Microsoft login page. The phishing page is hosted on a different domain though. By attempting to log in to their Office 365 account via the fake portal, the victim hands their security credentials to the hackers. However, it’s not just the Office 365 platform that’s at risk. A recent survey by NetMotion found that 300 remote workers clicked malicious web links in just 30 days. Against the backdrop of all these hacking and phishing events, it may be time to rethink best practices for cloud security. What are your thoughts on possible Office 365 security gaps? Feel free to ask any question or leave a suggestion in the comments section below.
SPONSORED
Name *
Email *
Commenting as . Not you?
Save information for future comments
Comment
Δ
