Attackers Exploit Legitimate Platforms for Phishing Scams

• •Attackers are using legitimate platforms to send phishing emails that pass authentication checks.
• •Two campaigns involving Staples and Dell resulted in 1,400 malicious messages targeting unsuspecting users.
• •The phishing emails contain embedded phone numbers, prompting victims to call and engage in scams.

Cyber attackers are increasingly abusing legitimate platforms like Staples and Dell to deliver phishing emails that appear authentic. Cisco Talos reported that over 25 legitimate platforms were exploited in the past year, with two notable campaigns involving 1,400 messages impersonating order confirmations. These emails passed DKIM and DMARC checks, creating a false sense of security. The attackers embedded fake support phone numbers in the emails, encouraging victims to call, thus moving them off email and into a voice conversation where further scams could occur. This tactic highlights a significant shift in phishing methods, as attackers leverage trusted systems to bypass traditional security measures. The current status indicates ongoing exploitation of this method, raising concerns for users of these platforms.