UCSF IT Technology

Cybercriminals are abusing Google Ads to have links to malicious web pages appear at the top of Google’s search results as sponsored links. These malicious links are tagged as “Ad” by Google. These web pages are made to imitate the software download pages for popular software utilities and applications.

Recent email-based attacks have abused Microsoft’s legitimate OneNote application to share malicious files. The emails use subject lines like “New Document Shared with you” and encourage the recipient to follow a link to view a shared OneNote file.  The OneNote link leads recipients to a shared document which contains the text “DOUBLE CLICK TO DOWNLOAD THE FILE NOW.”Some attacks may also distribute similar malicious OneNote files as email attachments.

Cybercriminals have launched a series of phishing attacks using timely email phishing lures related to annual compensation reviews and bonuses. The phishing emails encourage recipients to click a lure to confirm a payment-related change.Opening the link leads to a lookalike Microsoft login page, which is designed to steal credentials. The sending email address for the phishing emails is “hrdp” followed by a randomized string of letters and numbers.

Cybercriminals have launched a series of phishing attacks using an emailed fax of an alleged paycheck as a lure.

Cybercriminals have launched a series of phishing attacks using the promise of a paid Christmas bonus as a lure.