SurveyMonkey phishing attacks on Microsoft365 users

Researchers at Abnormal Security found that SurveyMonkey, an online polling service, was used as a bait to entrap Microsoft users into giving their login credentials. Victims received an email from the actual SurveyMonkey site regarding an employee survey. Thus, users didn’t suspect it to be potentially damaging phishing attack. The link redirects users to Microsoft form submission page where their login credentials were asked and stolen.

Click here to read the full story

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s