Phishers Use 'ZeroFont' Technique to Bypass Office 365 Protections

guest · Jun 19, 2018

Phishers Use 'ZeroFont' Technique to Bypass Office 365 Protections
June 19, 2018
https://www.securityweek.com/phishers-use-zerofont-technique-bypass-office-365-protections

According to cloud security company Avanan, one of the phishing protections in Office 365 involves natural language processing in order to identify text typically used in fraudulent or malicious emails.

In recent attacks spotted by Avanan, cybercriminals sent out phishing emails in which some of the content is set to be displayed with zero-size font using <span style="FONT-SIZE: 0px">. The security firm has dubbed this technique ZeroFont.

“Microsoft can not identify this as a spoofing email because it cannot see the word ‘Microsoft’ in the un-emulated version. Essentially, the ZeroFont attack makes it possible to display one message to the anti-phishing filters and another to the end user,” Avanan’s Yoav Nathaniel said in a blog post.
Click to expand...

Log in or Sign up

Phishers Use 'ZeroFont' Technique to Bypass Office 365 Protections

guest Guest

Log in or Sign up

Phishers Use 'ZeroFont' Technique to Bypass Office 365 Protections

guest Guest

Useful Searches