While those of us in the security industry might not be surprised, phishing attacks are consistently proving themselves to one of the most effective ways to evade traditional defenses.
As many organizations move to the Google cloud, this type of phishing lure will continue to yield results for the criminals.
The email reads:
Hello,Phishing emails aren't exactly rare, but this one caught my eye. In addition to being a somewhat plausible lure, it is an equal opportunity exploit.
A Secure Document was sent to you by your financial institute using Google Docs.
Follow the link below to visit Google Docs webpage to view your Document
Follow Here. The Document is said to be important.
Regards.
Happy Emailing,
The Gmail Team
If you click the link you are presented with a phishing page hosted in Thailand.
The page not only asks for your Google credentials, it also suggests it will accept Yahoo!, Outlook.com, Hotmail, AOL, Comcast, Verizon, 163.com or any other email account.
Full Story