NCSC-TAD-2204-002
الرقم المرجعي: NCSC-TAD-2204-002CVSS 0
Phishing Campaign Leverages Azure Static Web Apps
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- غير متوفر
نظرة عامة
A phishing campaign leverages Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive accounts. These phishing campaigns use landing pages and login forms that look almost identical to official Microsoft pages. The pages use the “*.1.azurestaticapps.net” wildcard TLS certificate to appear legitimate. The advisory also describes the use of Azure Blob Storage to target Office 365 and Outlook users.
التقنيات المتأثرة
- Microsoft accounts
- Office 365
- Outlook
- OneDrive
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
Check the URL before filling your account credentials in a login form.
- 02
Do not open suspicious texts, pop-up windows or click on links or attachments in emails.
- 03
Web content filtering. Whitelist allowed types of web content and websites with good reputation ratings. Block access to malicious domains and IP addresses, ads, anonymity networks, and free domains.
- 04
Protect your workstations and servers. We continue to encourage customers to follow our Protect Your Computer guidance of enabling a firewall, getting software updates, and installing antivirus software.
المراجع
- Gatlan, S. (2022, March 31). Phishing uses Azure Static Web Pages to impersonate Microsoft. Retrieved from Bleeping Computer(يفتح في علامة تبويب جديدة)
- Staff, I. W. (2022, April 1). Attackers Impersonate Microsoft Services To Target Customers. Retrieved from IT World Canada(يفتح في علامة تبويب جديدة)