Office 365 users targeted in SurveyMonkey phishing attack

guest · Jul 9, 2020

O365 users targeted in SurveyMonkey phishing attack
Phishing attacks are on the rise, with Office 365 users being targeted multiple times
July 8, 2020
https://windowsreport.com/surveymonkey-phishing/

Threat actors have targeted Office 365 users in these types of cybercrime multiple times before, and they continue to do so to date. Unsurprisingly, some of the latest victims/targets are employees participating in a fake SurveyMonkey survey.
SurveyMonkey phishing attack
The folks at Abnormal Security recently uncovered attempts to steal O365 user credentials on the pretext of conducting surveys among employees.

In the campaign, the victim receives an email from a genuine SurveyMonkey site. But the message contains a hidden link, which upon clicking, redirects the victim to a Microsoft form submission page.

The email is sent from a real SurveyMonkey domain (surveymonkeyuser.com), but with a different reply-to domain. That reply-to domain was registered only 1 month ago. The email simulates an automated notification with a link to open the “survey”. This link is an actual SurveyMonkey link that redirects to the main phishing page.
Click to expand...

Abnormal Security: Abnormal Attack Stories: Phishing through SurveyMonkey

In this attack, attackers send emails through SurveyMonkey in order to steal Microsoft credentials of employees.
Click to expand...

Log in or Sign up

Office 365 users targeted in SurveyMonkey phishing attack

guest Guest

Log in or Sign up

Office 365 users targeted in SurveyMonkey phishing attack

guest Guest

Useful Searches