Security News > 2022 > August > Phishing attack abuses Microsoft Azure, Google Sites to steal crypto

Phishing attack abuses Microsoft Azure, Google Sites to steal crypto
2022-08-10 16:50

A new large-scale phishing campaign targeting Coinbase, MetaMask, Kraken, and Gemini users is abusing Google Sites and Microsoft Azure Web App to create fraudulent sites.

Posting links to phishing pages on various legitimate sites aims to increase traffic and boost the malicious site's search engine rankings.

Because the phishing sites are hosted in Microsoft and Google services, they aren't flagged by automated moderator systems, allowing promotional messages to stay in the comment section for longer.

Google Sites is a free web page creation tool, part of Google's online service suite, allowing users to create websites and host them on Google Cloud or other providers.

The sites are just landing pages, and their visitors are redirected to the actual phishing sites when they click on the "Login" buttons.

For the crypto exchange phishing pages, the threat actors attempt to steal their login credentials.


News URL

https://www.bleepingcomputer.com/news/security/phishing-attack-abuses-microsoft-azure-google-sites-to-steal-crypto/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Google 102 256 4320 4678 741 9995
Microsoft 365 50 1369 2820 161 4400