Microsoft Warns of Crafty Phishing Campaign
The active campaign uses legitimate-looking original sender addresses and spoofed display sender addresses, along with other tactics, to bypass email filters.
Dark Reading Staff
PDF
Microsoft has warned of an active phishing campaign targeting Office 365 users with a crafty combination of techniques aimed at bypassing email filters.
The attack uses legitimate-looking original sender email addresses, spoofed display sender addresses that contain target usernames and domains, and display names that mimic legitimate services to slip past defenses, Microsoft Security Intelligence wrote in a Twitter thread.
Emails original sender addresses have variations of the word referral and use different top-level domains, officials note. The emails themselves have a SharePoint lure in both the display name and email message, which is disguised as a file share request for Staff Reports, Bonuses, Pricebooks, or other documents, with a l
Microsoft s latest warning for email users: Crafty phishing
slashgear.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from slashgear.com Daily Mail and Mail on Sunday newspapers.
Microsoft reminds users to watch out for BazaCall, a ransomware scam
windowscentral.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from windowscentral.com Daily Mail and Mail on Sunday newspapers.