Experts spotted a phishing campaign impersonating security firm Proofpoint

guest · Nov 7, 2021

Experts spotted a phishing campaign impersonating security firm Proofpoint
...to trick victims into providing Microsoft Office 365 and Gmail credentials.
November 7, 2021
https://securityaffairs.co/wordpress/124298/cyber-crime/phishing-campaign-proofpoint.html

Cybercriminals are impersonating the cybersecurity firm Proofpoint to trick victims into providing Microsoft Office 365 and Google Gmail credentials. The phishing messages use mortgage payments as a lure, they have the subject “Re: Payoff Request.”

“The email claimed to contain a secure file sent via Proofpoint as a link.” reads the post published by Armorblox. “Clicking the link took victims to a splash page that spoofed Proofpoint branding and contained login links for different email providers. The attack included dedicated login page spoofs for Microsoft and Google.”
Upon clicking the email link embedded in the message, the victims are redirected to a splash page with Proofpoint branding.
Click to expand...

Clicking on the Google and Office 365 buttons led the victims to specially crafted Google and Microsoft phising pages that asked for the victim’s credentials.
Click to expand...

Armorblox: A Pointed Spoof: Proofpoint Credential Phishing

In today’s Blox Tale, we will look at a credential phishing attack that impersonated Proofpoint and attempted to steal victims’ Microsoft and Google email credentials. The email claimed to contain a secure file sent via Proofpoint as a link.

Clicking the link took victims to a splash page that spoofed Proofpoint branding and contained login links for different email providers. The attack included dedicated login page spoofs for Microsoft and Google.
Click to expand...

Log in or Sign up

Experts spotted a phishing campaign impersonating security firm Proofpoint

guest Guest

Log in or Sign up

Experts spotted a phishing campaign impersonating security firm Proofpoint

guest Guest

Useful Searches