Phishing Campaign Uses Google Drive to Bypass Email Gateways

guest · Aug 14, 2019

Phishing Campaign Uses Google Drive to Bypass Email Gateways
August 14, 2019
https://www.bleepingcomputer.com/ne...n-uses-google-drive-to-bypass-email-gateways/

A highly targeted phishing campaign was recently observed while bypassing a Microsoft email gateway using documents shared via the Google Drive service to target the staff of a company from the energy industry.

"The email is legitimately sent by Google Drive to employees and appears to be shared on behalf of the CEO by an email address that does not fit the email naming convention of the targeted company," found Cofense.
Outdated info allows targets to detect the attack
In reality, the document linked to a Google Docs document which, in turn, redirected the potential victims to the attackers' phishing landing pages that would request them to enter their credentials to access the CEO's urgent message.

"The link within the email body is also hard to defend against because it links to an actual Google Drive share," also found the Cofense researchers.

Luckily, even though the phishers managed to bypass the company's phishing protections, they also used outdated information to create their phishing emails which should have given enough hints to the targeted staff that they were under attack.
Click to expand...

Cofense: Phishing Campaigns Imitating CEOs Bypass Microsoft Gateway to Target Energy Sector

Log in or Sign up

Phishing Campaign Uses Google Drive to Bypass Email Gateways

guest Guest

Log in or Sign up

Phishing Campaign Uses Google Drive to Bypass Email Gateways

guest Guest

Useful Searches