Office 365 Phishing {secure} Re: Status report 10/11/2022 - {secure}

Office 365 Phishing attack on Office 365 users

 

Watch out for Office 365 Phishing emails being received through the Office 365 servers this week..

Thay are using a single large image with all of the text embedded:

Clicking anywhere upon the image will take you through to the following link:

https://associationdatabase.com/aws/OHLA/ctrb/195138/40737/2845726?c=https%3a%2f%2flyl5x1.codesandbox.io?dg=ZW1haWxAZG9tYWluLnN1ZmZpeA===&i=10 

You can see the website below:

The phishing email forwards you to https://online-cdn5.matne.ru/PS-63457458dc914 which is a fake Office 365 logon phishing attack. You can see a screen showing their attack here: 

In the above case we have replaced the encoded email address with a generic one, but bear in mind that the email arrived with th recipients email instead. In this case, the email arrived from [email protected] which was named automated notification to confuse people.

Please report the sources of these messages as spammers and report the landing site here: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en 

 

Add comment