Malicious SharePoint and OneDrive links are a phishing scammer’s dream

guest · Oct 23, 2020

Malicious SharePoint and OneDrive links are a phishing scammer’s dream
October 22, 2020
https://www.scmagazine.com/home/sec...onedrive-links-are-a-phishing-scammers-dream/

Attackers are exploiting the rapid adoption of cloud-based collaboration services such as Microsoft’s SharePoint Online and OneDrive by leveraging them as a social engineering tool to trick users into clicking on malicious links, often for the purpose of wire fraud or supply chain fraud.

In an analysis this week, cybersecurity firm Proofpoint revealed that in the first half of 2020, it collected approximately 5.9 million email messages featuring malicious SharePoint Online and OneDrive links. While these emails constituted only about one percent of all messages containing malicious URLs, they represented more than 13 percent of all user clicks.
Click to expand...

Users were found to be seven times more likely to click on a malicious SharePoint or OneDrive link that’s hosted on a legitimate Microsoft domain. Recipients were four times more likely to click on a SharePoint phishing link, and 11 times more likely to click on a malicious OneDrive link.

“These attacks mimic the way people do business,” Itir Clarke, senior product marketing manager at Proofpoint, told SC Media.
Proofpoint observed about 5,500 compromised Microsoft tenants, “which represent a large portion of Microsoft’s enterprise customer base,” the company said in a blog post.
Click to expand...

According to Proofpoint, after a typical SharePoint or OneDrive account compromise, the attackers upload a malicious file and change the sharing permissions of the account to “public” so that anyone can access it. The malicious link is then shared with the compromised users’ contacts or other targeted individuals.

Sometimes the link is a unique redirect URL “and hence can be difficult to detect, as it would not appear on any URL reputation repository,” Proofpoint explained.
Click to expand...

Proofpoint: Why OneDrive and Sharepoint Attacks Are Successful and How to Fight Back

Users are ~7 Times More Likely to Click on Malicious SharePoint Online/OneDrive links
Click to expand...

Log in or Sign up

Malicious SharePoint and OneDrive links are a phishing scammer’s dream

guest Guest

Log in or Sign up

Malicious SharePoint and OneDrive links are a phishing scammer’s dream

guest Guest

Useful Searches