Researchers in cybersecurity are alerting users to a fresh phishing attempt that targets Microsoft OneDrive users in an attempt to run a malicious PowerShell script.
Rafael Pena, a security researcher at Trellix, stated in a Monday analysis that this campaign primarily uses social engineering techniques to trick victims into running a PowerShell script and compromise their PCs.
The “crafty” phishing and downloading campaign is being monitored by the cybersecurity firm under the moniker OneDrive Pastejacking.
The attack takes place using an HTML file attached to an email. When the file is accessed, it looks like a OneDrive page and shows an error message that reads, “Failed to connect to the ‘OneDrive’ cloud service.” You have to manually refresh the DNS cache to resolve the issue read more about OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.