UCSF IT Technology

Cybercriminals have launched phishing attacks claiming to originate from a company help desk team.

Cybercriminals have launched a series of phishing attacks using timely email phishing lures related to annual compensation reviews and bonuses. The phishing emails encourage recipients to click a lure to confirm a payment-related change.Opening the link leads to a lookalike Microsoft login page, which is designed to steal credentials. The sending email address for the phishing emails is “hrdp” followed by a randomized string of letters and numbers.

Cybercriminals have launched a series of malicious email attacks impersonating an Amazon package order confirmation.The attack uses Amazon-branded emails delivered from a Zoom sending address, as threat actors are abusing Zoom’s infrastructure.The emails prompt recipients to click a link to download an invoice for order details.

Recent email-based attacks have used compromised Microsoft OneDrive accounts to send phishing emails. These emails encourage recipients to click a link to view a shared document.The OneDrive links lead targets to shared PDF documents containing quick response (QR) codes.