Skip to main content
عربي
logo

NCSC-TAD-2204-002

Severity Level: Medium
Phishing

Reference No.: NCSC-TAD-2204-002CVSS 0

Phishing Campaign Leverages Azure Static Web Apps

Threat Type:
N/A
TLP:
CLEAR
CVE:
N/A

Overview

A phishing campaign leverages Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive accounts. These phishing campaigns use landing pages and login forms that look almost identical to official Microsoft pages. The pages use the “*.1.azurestaticapps.net” wildcard TLS certificate to appear legitimate. The advisory also describes the use of Azure Blob Storage to target Office 365 and Outlook users.

Affected Technologies

  • Microsoft accounts
  • Office 365
  • Outlook
  • OneDrive

Mitigation and Immediate Actions

  1. 01

    Check the URL before filling your account credentials in a login form.

  2. 02

    Do not open suspicious texts, pop-up windows or click on links or attachments in emails.

  3. 03

    Web content filtering. Whitelist allowed types of web content and websites with good reputation ratings. Block access to malicious domains and IP addresses, ads, anonymity networks, and free domains.

  4. 04

    Protect your workstations and servers. We continue to encourage customers to follow our Protect Your Computer guidance of enabling a firewall, getting software updates, and installing antivirus software.

References