Persuasive Office 365 phishing uses fake Zoom suspension alerts

guest · Jul 9, 2020

Persuasive Office 365 phishing uses fake Zoom suspension alerts
July 9, 2020
https://www.bleepingcomputer.com/ne...65-phishing-uses-fake-zoom-suspension-alerts/

Microsoft Office 365 users are targeted by a new phishing campaign using fake Zoom notifications to warn those who work in corporate environments that their Zoom accounts have been suspended, with the end goal of stealing Office 365 logins.

So far the phishing campaign impersonating automated Zoom account suspension alerts has landed in over 50,000 mailboxes based on stats provided by researchers as email security company Abnormal Security who spotted these ongoing attacks.
Cloned Zoom login page used for phishing credentials
The phishing emails spotted by Abnormal Security's researchers spoof an official Zoom email address and are designed to impersonate a legitimate automated Zoom notification.
Click to expand...

Using a spoofed email address and an email body almost free of any grammar errors or typos (besides an obvious 'zoom' instead of 'Zoom account') makes these phishing messages even more convincing and potentially a lot more effective.

"The importance of Zoom as a communications method is essential in a world under the shadow of the COVID-19 pandemic," Abnormal Security explained. "Thus, the user may rush to correct their account, click on the malicious link, and inadvertently enter credentials on this bad website."
Click to expand...

Abnormal Security: Abnormal Attack Stories: Spoofed Zoom Attack

In this attack, attackers are impersonating a notification from Zoom in order to steal Microsoft Office 365 credentials of employees at organizations targeted for this attack.
Click to expand...

Log in or Sign up

Persuasive Office 365 phishing uses fake Zoom suspension alerts

guest Guest

Log in or Sign up

Persuasive Office 365 phishing uses fake Zoom suspension alerts

guest Guest

Useful Searches