Microsoft 'tech support' scammers infest Azure hosting

guest · May 17, 2019

Microsoft 'tech support' scammers infest Azure hosting
May 17, 2019
https://www.itnews.com.au/news/microsoft-tech-support-scammers-infest-azure-hosting-525227

Microsoft's Azure cloud is housing hundreds of "tech support" scam web sites that try to deceive users that their computers are infected with malware, and ask for money to resolve the problem.

Security researcher Michael Gillespie who runs the ID Ransomware website posted under the Malwarehuntr Twitter account several lists of domain names used by the scammers that are hosted on Azure.
The scammer sites use the azurewebsites.net domain name. Microsoft's Azure cloud currently offers free accounts for 12 months, with a A$280 credit for any services for 30 days.

As part of the package, scammers get a transport layer security digital certificate to authenticate the sites, for free.
In iTnews testing, many of the sites listed by Gillespie were marked as being dangerous by Google Chrome which blocked access to them with a warning interstitial.
Click to expand...

Bleeping Computer: Microsoft Tech Support Scams Invade Azure Cloud Services

Microsoft Azure has a feature called App Services that allows you to quickly and easily mass deploy web sites to the cloud.
As an example of bad actors utilizing Azure services, since May 10th, security researchers MalwareHunterTeam and JayTHL have discovered close to 200 web sites hosted on the Azure App Services platform that were displaying tech support scams.

Below are various tech support scams being pushed by these sites. All of them pretend to be an alert from Microsoft or Apple that states your computer is infected with spyware or a virus. [...]
Phishing too
In addition to tech support scams, phishing sites are moving to Azure cloud services as well.
Click to expand...

guest · Jun 1, 2019

Microsoft Azure Being Used to Host Malware and C2 Servers
June 1, 2019
https://www.bleepingcomputer.com/ne...re-being-used-to-host-malware-and-c2-servers/

Just this month, BleepingComputer reported on two incidents related to malware on Azure. In one case there were about 200 websites showing tech-support scams that were hosted on the platform.
It appears that these are not isolated incidents. Security researchers JayTHL and MalwareHunterTeam found malware on Azure and reported it to Microsoft on May 12.

According to AppRiver cybersecurity company, the reported piece of malware along with other samples that were uploaded at a later time were still present on Microsoft’s Azure infrastructure on May 29.

“It's evident that Azure is not currently detecting the malicious software residing on Microsoft's servers,” says David Pickett of AppRiver.
However, Windows Defender will kick in and block the malicious file when users try to download them on the machine.

Microsoft Azure would not be the first big-name platform abused to store malicious content; Google Drive, Dropbox, and Amazon’s web services are just some examples. Typically, cybercriminals compromise legitimate websites and use them to host malicious content, but they will not shy away from grabbing any opportunity to do their business, especially if little risk and effort are on the table.
Click to expand...

AppRiver: THREAT ALERT - Malware Being Hosted On Azure

Log in or Sign up

Microsoft 'tech support' scammers infest Azure hosting

guest Guest

guest Guest

Log in or Sign up

Microsoft 'tech support' scammers infest Azure hosting

guest Guest

guest Guest

Useful Searches