Security researchers have uncovered a new tactic being used by threat actors in phishing cyber attacks, adding another layer of complexity to an already sophisticated crime. According to a recent report, attackers are now leveraging Microsoft Visio .vsdx format files to evade detection during credential stealing cyber attacks.
This new method, known as two-step phishing attacks, involves luring victims with seemingly harmless files that contain malicious URLs. By embedding these URLs in Visio files, attackers are able to trick users into clicking on them, leading to compromised Microsoft SharePoint pages and ultimately, attempts to steal user credentials.
To make matters worse, victims are instructed to hold down the Ctrl key while clicking on the embedded URL, a subtle yet effective tactic designed to evade detection by email security scanners and automated tools. Once redirected to a fake Microsoft 365 portal login page, unsuspecting users are prompted to enter their credentials, which are then stolen by the attackers.
In a separate development, threat actors are also using scalable vector graphics (SVG) attachments to deploy phishing cyber attacks. These attachments can display malicious forms or deploy malware while evading detection by security software. Security experts advise treating all emails with SVG attachments as suspicious and taking precautions to avoid falling victim to these increasingly sophisticated cyber attacks.
As cyber criminals continue to evolve their tactics, it’s more important than ever for individuals and organizations to stay vigilant and implement robust security measures to protect against phishing attacks.