Find your own way to the site or service you're supposed to use. If you started from an email, stop if you hit a password demand. Don't let the crooks distract you by leading you away from your email client first to make their phishing page feel more believable when you get there. That's an extension to our usual advice never to click login links that appear directly in emails. Don't click login links that you reach from an email.
Sophos principal research scientist Paul Ducklin provides a few pointers: Those who enter their details then hand their information over to the attackers. The login page is supposed to tempt users into entering their details to access an Excel file. In one case, the login page was stuck on a hacked WordPress site. When victims open the OneNote file, there is a link that takes them to a fake login page. But the sender's business relates to construction, and the domain name in the SharePoint link apparently refers to a building company, so the link is at plausible, at least,” Sophos researchers note. “The SharePoint link you're expected to click to access the One Note file does look suspicious because there's no clear connection between the sender's company and the location of the OneNote lure. The email contains an attachment that asks victims to use SharePoint to access a OneNote file. By coming from a ‘genuine' sender, the scams are more likely to work because the intended victims trust the sender more than they would trust a stranger. The scams start with an email that is actually from a genuine company – but the company has likely been hacked and email addresses have been compromised. Sophos researchers say that the attackers take a slightly different approach to the standard ‘fake login' phishing email. Phishing scams continue to play on the popularity of remote working and collaboration tools, as scammers seek to take advantage of unwitting victims.Ī recent report from Sophos indicates one of the most recent tactics attackers are using to conduct their scams uses collaborative platforms SharePoint and OneNote.
0 kommentar(er)
