Scammers are being forced to be creative as more phishing attacks are coming to light on a daily basis. With this campaign, emails are sent by scammers that tell their target, “you won’t be able to open your Excel or any document file due to a system delay.” Included with that message is a prompt for the receiver to click on a link labeled, “Configure Excel and PDF Settings” to access their files. When clicked, it takes the victim to a SharePoint login form which mimics a shared Excel document. Instead of recovering their files, their credentials are saved to a server operated by the scammers where they can later use the login information to carry out Business Email Compromise (BEC) scams or total account takeovers.
By Anthony Zampino Introduction Leading up to the most recent Russian invasion of Ukraine in