Office 365 phishing scam uses Google Ad domains to evade security



A new phishing campaign that tries to steal users’ Office 365 login credentials by tricking them into accepting a new Terms of Use and Privacy Policy has been discovered by researchers at the Cofense Phishing Defense Center (PDC).

This campaign has been observed across multiple organizations and employs a number of advanced techniques, including a Google Ad Services redirect, to try and steal employees’ login credentials. 



Source link

LEAVE A REPLY

Please enter your comment!
Please enter your name here