Phishing Campaign Uses Malicious Office 365 App

Most phishing campaigns attempt to take over accounts by tricking the victim into divulging their credentials. PhishLabs has uncovered a previously unseen tactic by attackers that uses a malicious Microsoft Office 365 App to gain access to a victi… Continue reading Phishing Campaign Uses Malicious Office 365 App

Active TrickBot Campaign Observed Abusing SendGrid and Google Docs

PhishLabs has observed an active TrickBot campaign targeting the employees of multiple organizations. Trickbot is a sophisticated successor of the Dyre Banking Trojan. It uses an intricate network of command and control servers (C2), web injects, … Continue reading Active TrickBot Campaign Observed Abusing SendGrid and Google Docs

Active Office 365 Phishing Campaign Targeting Admin Credentials

PhishLabs has detected attempts to compromise Microsoft Office 365 administrator accounts as part of a broad phishing campaign. In the campaign, the threat actor(s) delivered a phishing lure that impersonated Microsoft and their Office 365 brand b… Continue reading Active Office 365 Phishing Campaign Targeting Admin Credentials