UCSF IT Technology

Threat Alert WordPress-Themed Lures Install Malicious Plugin 

Cybercriminals have launched a series of phishing attacks using timely email phishing lures related to annual compensation reviews and bonuses.  The phishing emails encourage recipients to click a lure to confirm a payment-related change.

Cybercriminals have launched a series of phishing attacks that claim to inform the recipient of physical altercations between employees and equipment damage at a worksite.  The lures include a malicious attachment allegedly containing a video of the altercation.

Cybercriminals have launched phishing attacks claiming to originate from a company help desk team.

Cybercriminals have launched a series of malicious email attacks impersonating an Amazon package order confirmation. The attack uses Amazon-branded emails delivered from a Zoom sending address, as threat actors are abusing Zoom’s infrastructure. The emails prompt recipients to click a link to download an invoice for order details.

Recent email-based attacks have used compromised Microsoft OneDrive accounts to send phishing emails. These emails encourage recipients to click a link to view a shared document. The OneDrive links lead targets to shared PDF documents containing quick response (QR) codes.

Threat Alert: Phishing Attacks Abuse Proofpoint Branding