Phishers Use Fake VPN Config Notification to Target Office 365 Details

Parthiv Menon

June 14, 2020

Security researchers at Abnormal Security have intercepted phishers making use of a fake VPN configuration notification to target employees’ Office 365 credentials. The attackers capitalized on the trend of organizations implementing VPNs to secure their employees working from home during the ongoing pandemic. The link provided in the email, which was spoofed to impersonate the domain of the target recipients’ organization, supposedly directed users to a new VPN configuration for home access. Instead, the users ended up on a phishing landing page hosted on a Microsoft .NET platform, thereby faking legitimacy

Abridged fromThe State of Security