UCSF IT Technology

Cybercriminals have launched phishing attacks leveraging compromised Microsoft Office 365 accounts.The lures include .rpsmg file attachments, as well as embedded URLs hidden behind a “Read the Message” button.   Clicking the malicious link leads to a credential phishing kit that redirects the user to a legitimate login page.

Google has introduced eight new top-level domains (TLDs), the equivalents of “.com”, that websites can use. Among these new TLDs are “.zip” and “.mov”.

Cybercriminals are increasingly using phishing-as-a-service kits to build and distribute lookalike Microsoft Office 365 landing pages via phishing lures.  The phishing lures can be customized to have a variety of different appearances or themes.