Phishy Business: How Cybercriminals Reeled in 6,000 Organizations with Fake Document Alerts
Phishing campaign impersonating digital document platforms duped over 6,000 organizations in two weeks, says Check Point Research. Mimicking SharePoint and DocuSign, these emails trick users with genuine-looking alerts. The phishing ploy used redirect cloaking through Mimecast and other platforms, making links appear trustworthy while leading to credential theft pages.
Hot Take:
In the latest plot twist of the digital Wild West, cybercriminals have turned to impersonating your favorite e-signing and file-sharing platforms to pilfer your data, proving once again that just because it’s wrapped in a familiar logo, doesn’t mean it’s safe. Remember, if it looks like a duck and quacks like a duck, it might just be a phishing scam in disguise!
Key Points:
- Over 6,000 organizations targeted in a phishing campaign mimicking platforms like SharePoint and DocuSign.
- Phishing emails closely replicated legitimate notifications, fooling users into credential theft.
- Attackers used Mimecast’s URL rewriting service to cloak malicious links.
- Campaign affected sectors including consulting, tech, real estate, healthcare, and government.
- Mimecast clarified that no technical flaws were exploited in their systems during these attacks.
Already a member? Log in here