Monday.com removes “Share Update” feature abused for phishing attacks
Monday.com, a project management software, has eliminated its "Share Update" feature due to misuse by malicious actors during phishing campaigns.
With the use of automated processes and dashboards, teams can manage and organize their work with Monday.com, a cloud-based project management tool. Among the 225,000 users of the platform include Coca-Cola, Canva, LionsGate, Oxy, Compass, and Zippo.
Customers of Monday.com informed BleepingComputer on Tuesday that they had received phishing emails from the company's email accounts and were worried that the company had been compromised.
These emails, which originated from notifications@monday.com and were sent via SendGrid, successfully passed DKIM, DMARC, and SPF authentication.
Under the guise of a "Human Resources" department, the...