Researchers at Barracuda have noticed a rise in phishing assaults that abuse standard content material creation and collaboration platforms. These embody on-line graphic design platforms and document-sharing providers broadly utilized by instructional establishments and companies.
“The analysts discovered that attackers are sending out emails from these platforms, that includes legitimate-looking posts, designs, and paperwork, however with embedded phishing hyperlinks,” the researchers write. “If an e mail recipient interacts with these hyperlinks, they’re usually directed to fraudulent login pages or different misleading websites intent on stealing delicate info, equivalent to login credentials and private knowledge.”
In a single occasion, attackers used a collaboration device utilized by faculties to share hyperlinks to a spoofed Microsoft login web page designed to reap credentials.
“The analysts discovered a number of phishing assaults leveraging a web based collaboration device broadly utilized in instructional settings,” the researchers write. “The platform permits college students to create and share digital boards or ‘partitions’ the place they’ll put up and arrange a number of kinds of content material. Cybercriminals are leveraging the platform’s put up partitions to ship emails with embedded phishing hyperlinks or URLs. In a single instance seen by the analysts, the platform is used to host voicemail phishing hyperlinks. As soon as the person clicks the button to play the voicemail, it takes them to a different hyperlink, which redirects them to a faux Microsoft login web page designed to seize and steal their login credentials.”
The researchers emphasize that college students and workers should be conscious that authentic instruments might be abused to unfold malicious hyperlinks.
“It’s vital that for people and organizations, together with instructional establishments, stay vigilant and implement strong safety measures that may detect and adapt to evolving threats,” Barracuda concludes. “For instance, people should be cautious of clicking on hyperlinks in unsolicited emails, or in message from individuals they don’t know. Different potential crimson flags embody suspicious calls to motion, and surprising or illogical touchdown websites from hyperlinks they obtain, equivalent to a service that is not offered by Microsoft asking for Microsoft logins.”
KnowBe4 empowers your workforce to make smarter safety choices on daily basis. Over 70,000 organizations worldwide belief the KnowBe4 platform to strengthen their safety tradition and cut back human threat.
Barracuda has the story.