[ALERT] Microsoft Office 365 Users - Hacked From the Inside
Brian Gibbs
Cybersecurity Enabler, Saving Companies Daily from Cybersecurity Threats | Lead Cybersecurity Instructor | CvCISO | CISSP | QTE | Fun-loving Dad
If you’re a Microsoft Office 365 User, BEWARE of malicious insiders…
Phishers are sending specialized links, taking you to your email login page - and prompting you to download malicious software...
You are giving the attacker PASSWORD-FREE-ACCESS to your emails and files!
The malicious apps bypass 2-factor authentication since the user (you) has already logged into the account and granted permission!!!
So far, one in five targets is successfully compromised.
This ruse isn’t new to hackers. These attacks were first noticed in January of 2020. Since then, Microsoft has struggled to fix this problem...
For now, they’ve rolled out instructions for detecting and removing illicit consent HERE.
Security experts are also advising users to make sure they have security logging turned on, so alerts are generated whenever new software (in this case, MALWARE) is introduced or downloaded...
P.S. Contact me today to discuss in more detail: brian.gibbs@tridengroup.com