Ongoing phishing scams have been spotted targeting Microsoft Office 365 with partial audio voicemail messages to convince targets that they need to login to hear the full recording.
While using actual audio recordings in voicemail phishing scams is not new, researchers from McAfee have recently seen an uptick in their usage by various phishing kits targeting Microsoft Office 365 credentials.
"Over the past few weeks McAfee Labs has been observing a new phishing campaign using a fake voicemail message to lure victims into entering their Office 365 email credentials," McAfee researchers stated. "At first, we believed that only one phishing kit was being used to harvest the user’s credentials. However, during our investigation, we found three different malicious kits and evidence of several high-profile companies being targeted. "
securingtomorrow.mcafee.com
