A clever mix of brand impersonation, a supposedly received message, a thumbnail preview, and new spoofed Office 365 logon pages are all that’s needed to trick victims into giving up credentials.
A new targeted phishing attack seen by security researchers at Abnormal Security appears to have already impacted hundreds of organizations successfully using a personalized notification of a received fax.
Posing as notifications from legitimate electronic fax services such as eFax, the phishing emails often use legitimate compromised email addresses, with the contents providing enough detail to pique the curiosity of the recipient, seeking to lure them into clicking on a “View Document” link:
Source: Abnormal Security
According to Abnormal Security, “the embedded URLs redirect to fake, never-seen-before Microsoft O365 spear phishing pages hosted on digital publishing sites like Joom, Weebly and Quip, of which hundreds have been detected.”
Because of the mix of compromised accounts and never before seen spoofed logon pages, these attacks are finding their way into Inboxes, putting organizations at risk.
Organizations need to make users mindful through Security Awareness Training that educates users on these kinds of attacks, how to maintain a vigilant sense of scrutiny, and how to ignore such emails resulting in reducing your organization’s threat surface.
Here's how it works:
