Microsoft Office 365 Admins Targeted by Ongoing Phishing Campaign

guest · Nov 17, 2019

Microsoft Office 365 Admins Targeted by Ongoing Phishing Campaign
November 16, 2019
https://www.bleepingcomputer.com/ne...admins-targeted-by-ongoing-phishing-campaign/

A new phishing campaign is actively targeting Microsoft Office 365 administrators with the end goal of compromising their entire domain and using newly created accounts on the domain to deliver future phishing emails.

They also use "Services admin center" as the sender name for the phishing messages delivered through this ongoing campaign as an attempt to spoof the legitimate Microsoft 365 admin center support team, and "Action Required" or "We placed a hold on your account" subjects to persuade their targets to act first and think later.

"Well established domains with a track record of sending benign messages are less likely to be quickly blocked by these systems," PhishLabs says. "This increases the deliverability and efficiency of phishing lures."
Having already used compromised Office 365 domains to spread their phishing scam to more targets hints at the possibility that any domains they manage to infiltrate using this method will also be utilized to launch new attacks, abusing the identity of the successfully compromised organization to spoof future spam messages.
Click to expand...

Log in or Sign up

Microsoft Office 365 Admins Targeted by Ongoing Phishing Campaign

guest Guest

Log in or Sign up

Microsoft Office 365 Admins Targeted by Ongoing Phishing Campaign

guest Guest

Useful Searches