Microsoft Office Phishers Move to Enterprise AWS Landing Pages

guest · Aug 10, 2019

Microsoft Office Phishers Move to Enterprise AWS Landing Pages
August 9, 2019
https://www.bleepingcomputer.com/ne...hishers-move-to-enterprise-aws-landing-pages/

An ongoing phishing campaign targeting several organizations with the help of DocuSign branded spam e-mails has been observed by Proofpoint's Threat Insight Team while abusing Amazon Web Services (AWS) to host their landing pages.

However, as Proofpoint found, some of the phishing actors they monitored throughout 2019 have slowly moved to "enterprise-class public cloud storage providers such as Amazon Web Services (AWS) and Microsoft Azure."
One of the phishing campaigns Proofpoint analyzed since the start of 2019 is still active and it uses spam e-mail and landing page templates featuring stolen DocuSign branding.
Cloud storage services commonly abused by phishers
The phishing campaign observed and analyzed by Proofpoint in their report follows a larger trend of threat actors taking advantage of cloud storage to host phishing kits.
Click to expand...

Proofpoint: Phishing Actor Using XOR Obfuscation Graduates to Enterprise Cloud Storage on AWS

Log in or Sign up

Microsoft Office Phishers Move to Enterprise AWS Landing Pages

guest Guest

Log in or Sign up

Microsoft Office Phishers Move to Enterprise AWS Landing Pages

guest Guest

Useful Searches