Page 10 - Google Firebase News Today : Breaking News, Live Updates & Top Stories | Vimarsana

LogoKit Group Aims for Simple Yet Effective Phishing A phishing kit that uses embedded JavaScript targeted the users of more than 300 sites in the past week, aiming to grab credentials for SharePoint, Adobe Document Cloud, and OneDrive. A relatively new phishing kit uses embedded JavaScript to dynamically change elements of spoofed webpages to more easily fool users. The adoption of the phishing tool, called LogoKit, has seemingly accelerated, with 700 domains running the kit in the past month — 300 of those in only the last week — and targeting users of popular domains, such as Microsoft...

Researchers said that unlike other phishing kits that take advantage of complex layouts and multiple files, the LogoKit family is an embeddable set of JavaScript functions. These kits interact within the Document Object Model (DOM), allowing the script to dynamically alter the visible content and HTML form data within a page without user interaction. RiskIQ security researcher Adam Castleman said his company had observed more than 700 domains running with LogoKit. Targeted services range from generic login portals to false SharePoint portals, Adobe Document Cloud, OneDrive, Office 365, and cr...

minute read Share this article: A phishing kit has been found running on at least 700 domains – and mimicking services via false SharePoint, OneDrive and Office 365 login portals. A newly-uncovered phishing kit, dubbed LogoKit, eliminates headaches for cybercriminals by automatically pulling victims’ company logos onto the phishing login page. This gives attackers the tools needed to easily mimic company login pages, a task that can sometimes be complex. Cybercriminals have relied on LogoKit to launch phishing attacks on more than 700 unique domains over the past 30 days (in...