By Jeremy Fuchs, Cybersecurity Researcher/Analyst, Check Point Software
We’ve been writing recently about how hackers are utilizing legitimate services to send out phishing campaigns. We’ve seen it used from Google, QuickBooks, PayPal and more.
There are a few reasons behind this trend. One, it’s simple. Hackers are able to create free accounts with these services and send them out to multiple targets. They then can embed a phishing link within a legitimate document and email it directly from the service. The email is legitimate—it comes directly from the service and will pass all SPF checks and other standard things that security services look for.
Hackers have a ton of tools at their disposal to conduct these attacks. A new favorite is Microsoft’s file-sharing service, SharePoint. In this attack brief, Check Point Harmony Email researchers will discuss how hackers are using SharePoint to send out phishing links.
- Jeremy Fuchs, Cybersecurity Researcher/Analyst, Check Point Software Company
- Cyber Security & e-Crime
- Posted On




