Phishing attacks increased in Microsoft 365, says FireEyePhishing attacks increased in Microsoft 365, says FireEye

Top Stories

»	Committed to nurture next-gen innovation in 6G technology: Jyotiraditya Scindia
»	Piyush Goyal holds talks with Malaysian minister on review of ASEAN trade pact
»	India and OPEC have a unique and symbiotic relationship: Hardeep Puri
»	SIP inflows hit all-time high in June, total AUM for equity MF at Rs 74.41 lakh crore
»	India set to explore over 2.5 lakh sq kms area in one of largest offshore energy efforts

IANS | 10 Oct, 2019
As cyber attackers are gaining ground in Cloud, Microsoft continues to be the most popular brand used in phishing scams, a FireEye report has said.

The US cybersecurity firm FireEye saw Microsoft Office 365-themed phishing attacks increase by 12 per cent over the quarter.

"Microsoft continues to be the most popular brand utilised in phishing attacks, with 68 per cent of all phishing detections," said Michael Hulton, Vice President and GM of Email Security, FireEye.

A typical phishing email impersonates a well-known contact or trusted company to induce the recipient to click on an embedded link, with the ultimate goal of credential or credit card harvesting.

Attackers are constantly adapting their tactics to get past email security defences.

"Bad actors are following where the money goes, with an arsenal of tools at their disposal. That's why as companies migrate to the cloud, we see more attackers exploiting cloud services to perpetrate their attacks," the report added.

At the FireEye's "Cyber Defence Summita here, the company on Wednesday released its latest email threat update after analyzing more than two billion emails.

"Some of the most common tactics include hosting Microsoft-themed phishing pages with Microsoft Azure, nesting embedded phish URLs in documents hosted on popular file sharing services, as well as establishing phishing URL redirects on popular email delivery platforms," the report elaborated.

When it comes to verticals which are facing cyberattacks, entertainment, media and hospitality has taken the top position from financial services, which dropped to number two.

Other highly-targeted verticals for email-based attacks include manufacturing, service providers, telecom, state and local governments, services, consulting and insurance.