Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks
Microsoft is alerting users to cyberattack operations that take advantage of trusted file hosting services—like Dropbox, OneDrive, and SharePoint—that are frequently utilized in business settings as a means of getting around security measures.
The campaigns' diverse and wide-ranging objectives enable threat actors to carry out business email compromise (BEC) assaults, compromise identities and devices, and eventually cause financial fraud, data exfiltration, and lateral movement to other endpoints.
An increasingly common risk vector used by adversaries to blend in with legitimate network traffic is the weaponization of legitimate internet services (LIS). This allows adversaries to often get by standard security measures and makes attribution attempts more difficult read more about M...
