Hackers exploit content material creation platforms for phishing assaults, warn specialists

Cybersecurity specialists have discovered that hackers use content material creation and collaboration platforms to launch phishing assaults, duping unsuspecting customers into scams.

“The content material creation platforms have tens of millions of customers worldwide. The analysts discovered that attackers are sending out emails from these platforms, that includes legitimate-looking posts, designs, and paperwork, however with embedded phishing hyperlinks,”  Saravanan Govindarajan, Supervisor, Menace Evaluation at Barracuda, stated.

Individuals who click on on the hyperlinks are directed to fraudulent login pages or different misleading websites intent on stealing delicate info, corresponding to login credentials and private knowledge. 

“The rise in phishing assaults leveraging trusted content material creation and collaboration platforms highlights a shift in cybercriminal techniques in direction of the misuse of widespread, respected on-line communities to implement assaults, evade detection and exploit the boldness that folks have in such platforms,” he stated.

Attackers have been generally seen utilizing QR codes, widespread webmail providers, and URL shorteners.

The right way to defend oneself

To remain shielded from such threats, Barracuda recommends that electronic mail recipients train  warning when invited to click on on hyperlinks in unsolicited emails or messages from unknown senders. Different potential purple flags embrace suspicious calls to motion and surprising or illogical touchdown websites from hyperlinks they obtain, corresponding to a service that isn’t offered by Microsoft asking for Microsoft logins.