Office 365 users at risk as phishing campaign uses Kaspersky's stolen Amazon SES token

Office 365 users at risk as phishing campaign uses Kaspersky's stolen Amazon SES item

Don has been writing professionally for over 10 eld now, but his passion for the written word started back in his grammar school days. His work has been published along Livebitcoinnews.com, Learnbonds.com, eHow, AskMen.com,... Read much

Kaspersky has issued a statement that there is a phishing campaign targeting Office 365 users.
The phishing campaign is through the Amazon Simple Netmail Service (SES) token.
An email from an official Kaspersky account was used in the phishing run.

Cybercriminals look to Be having a outing with the number of phishing campaigns reported lately. Kaspersky makes the list American Samoa the latest entrant in these attacks.

Microsoft had a similar phishing campaign attack a few months ago with the criminals thirsty for credentials.

Kaspersky security experts throw detected phishing attempts that target Business office 365 users direct the Amazon SES.

The Amazon SES is an e-mail service that allows developers to send emails from any app for different cases.

Servers are dependable

The phishing campaign is non linked to one individual as it seems it is a multi-criminal tone-beginning. Two phishing campaign kits appear to receive been victimized, namely Iamtheboss and another named MIRCBOOT.

The servers have not been compromised, Eastern Samoa the SES token was revoked immediately later on the phishing attacks were unconcealed.

Sourcing for credentials

The cybercriminals made an essay by camouflaging the phishing messages and redirecting users to the phishing landing pages. The aim was to harvest the victims' Microsoft credentials.

The cybercriminals used an official Kaspersky netmail through the Amazon Web Services infrastructure.

This enabled them to well bypass Secure Email Gateway (SEGs) protections and access the victims' mailboxes.

Users to outride vigilant

Although no servers were compromised operating theater malicious activities were noticed, Kaspersky advises its users to be unneeded vigilant and cautious when asked for their credential.

If you are unsure where the emails are coming from, you can verify the sender's identity along Kaspersky's blog.

What are some of the tips you use to protect yourself from cyber-attacks? Share with us in the comment subdivision below.