However, there is a new phishing attack that stores their phishing form on Azure Blob Storage, so that it is secured by a Microsoft SSL certificate, giving an air of legitimacy to its victims. The phishing attack is an Office 365 based attack.

Azure Blob storage is a service that allows for storing large amounts of unstructured object data, such as text or binary data. This data can then be accessed anywhere in the world using HTTP or HTTPS. When the user connects via HTTP or HTTPS, a SSL certificate will be displayed, making it difficult for even competent users to tell it’s a phishing attack.

Cloud security provider Nekskope recently discovered this method being used. The attackers have been sending victims emails with a PDF attachment that pretend to be from a law firm in Denver. The attachments are innocently named “Scanned document. Please review” and contains a button to download the PDF. When the target clicks on the button they are brought to a HTML page masquerading as an Office 365 login form. The URL may trigger some savvy users to be suspicious, but the SSL may be enough to convinced them that this is a secured and legitimate Microsoft site.

Once Clicked on the “Download PDF”button, you are presented with message that the document is trying to connect to Azure blob storage

In order to protect yourself from this type of attack Netskope advises that companies would properly educate their users to recognise non-standard URL addresses. If users could easily recognise the legitimate address and be suspicious of any change in the web address then they would be less likely to fall victim to this type of phishing scam.

[stackCommerce layout=”2″ count=”5″ sort=”best_sellers”][/stackCommerce]

The post Azure Blob Storage phishing attack impersonates Microsoft appeared first on Hack Ware News.

These days business is pretty much synonymous with technology, and having a professional knowledge of IT becomes more and more of an asset in any position. Whether you’re already an IT specialist and want to get a new certification, or you’re in a seemingly unrelated field but could stand to benefit from branching out, there’s a track in The Complete 2018 CompTIA Certification Training Bundle for you.

CompTIA is one of the most respected IT certification providers in the industry. The training starts with the foundational CompTIA certifications and a broad overview of IT literacy. If you’re interested in cloud environments, the bundle offers courses in Cloud Essentials and Cloud+, which train you to deliver and maintain enterprise-level cloud infrastructures, as well as pursue careers in the field.

Interested in security? CompTIA Advanced Security Professional teaches you how to design and implement solutions for enterprises at a high level. Beyond that, CSA+ teaches you how to defend against hackers using the new behavioral-analytical method.

If your focus is on entering project management, Project+ gives future project managers a guide on how to enter the super-lucrative field. Plus, additional courses include even more specialized areas like system administration in Linux, overall network administration, as well as healthcare-specific IT systems.

No matter your background, Complete 2018 CompTIA Bundle will give you the tools necessary to realize your IT goals. Grab it now for 98% off at $59 out the door.

The post Land a Career in IT With This Online CompTIA Certification Training appeared first on Hack Ware News.