Rewterz Threat Alert – Active Phishing Targeting Microsoft

Severity

Medium

Analysis Summary

A spear phishing campaign detected targeting Microsoft’s login page luring users to put up their credentials and playing into the hands of threat actors. This has been a common practice by threat actors to impersonate the login page of Microsoft and these type of phishing activities increase at the end of the year as well. 

Impact

Credential theft

Indicators of Compromise

http[:]//printerstudent[.]com/ssl/cmd-login=7b7adf0f2b466d1461eae7dcc85b77d4/

Remediation

• Block all threat indicators at your respective controls.
• Always be suspicious about emails sent by unknown senders.
• Never click on links/attachments sent by unknown senders.