Security News > 2020 > July > Phishing attacks hiding in Google Cloud to steal Microsoft account credentials

By hosting phishing pages at a legitimate cloud service, cybercriminals try to avoid arousing suspicion, says Check Point Research.

The idea is that such phishing pages will better elude detection by security products and more easily ensnare unsuspecting victims.

A recent phishing attack analyzed by cyber threat intelligence provider Check Point Research is using Google Cloud services to conceal its malicious intent.

Built to resemble a Microsoft SharePoint notice, the PDF contains a link to Access Document, which takes the user to the actual phishing page.

Through the entire journey from the initial PDF document to the final PDF report, the campaign appears to be convincing, especially because the phishing page is hosted on Google Cloud.

News URL

https://www.techrepublic.com/article/phishing-attacks-hiding-in-google-cloud-to-steal-microsoft-account-credentials/#ftag=RSS56d97e7