Health-ISAC, Microsoft and partners take down popular phishing kit services
Microsoft and the health care industry’s information sharing and analysis center have teamed up to disrupt a prolific China-based phishing ecosystem.
A new type of phishing campaign is targeting thousands of businesses by exploiting calendar invites and meeting requests in Microsoft 365. These attacks can be launched using .ics attachment files or malicious links, and are designed to trick recipients into providing their login credentials. Researchers from Check Point Security Firm have observed over 40,000 organizations being targeted by these large-scale phishing campaigns.
The campaigns have been growing rapidly, with hundreds of thousands of phishing emails sent each month, and the volume is increasing daily. The emails may appear to be legitimate calendar invites, payment notifications, or meeting requests. However, opening the attachment or clicking on the link can lead to the victim's Microsoft 365 login information being harvested by the attackers.
Employees should be cautious of unsolicited emails and be aware of the risks associated with clicking on links or downloading attachments from unknown sources.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
