Perception Point Blog Archive: Attack Trends

Rewriting Hysteria: Rising Abuse of URL Rewriting in Phishing

In recent months, threat actors have discovered a troubling new method to exploit URL rewriting, a feature intended to protect users by replacing links in emails. By manipulating these rewritten URLs, attackers mask highly evasive phishing links behind trusted domains of security vendors, effectively bypassing detection. This abuse has led to a critical surge in advanced phishing attacks that leverage the very tools developed to prevent them.

Peleg Cabra, Product Marketing Manager
Nov-24

Phishing by Design: Two-Step Attacks Using Microsoft Visio Files

Perception Point’s researchers have uncovered a new type of two-step phishing attack leveraging Microsoft Visio files (.vsdx) and SharePoint. These attacks embed malicious URLs in .vsdx format files to evade detection and steal credentials.

Peleg Cabra, Product Marketing Manager
Nov-24

Evasive ZIP Concatenation: Trojan Targets Windows Users

Threat actors continually seek innovative methods to evade detection, and ZIP file concatenation has proven to be an effective tactic. By exploiting the different ways…

Arthur Vaiselbuh, Windows Internals Engineer
Nov-24

You’re Invited: Rampant Phishing Abuses Eventbrite

In a new Eventbrite phishing campaign, threat actors misuse Eventbrite’s services to steal financial or personal information.

Ofek Ronen, Machine Learning Software Engineer
Oct-24

Two-Step Phishing Campaign Exploits DocuSign’s Web Forms

In recent research, the Perception Point team uncovered a new wave of attacks abusing DocuSign's Web Forms—a feature designed for data collection and document management.

Ruth Shames
Oct-24

Quishing 2.0: QR Code Phishing Evolves with Two-Step Attacks and SharePoint Abuse

In a new quishing campaign discovered by Perception Point’s security research team, threat actors took QR code phishing to a whole new level.

Peleg Cabra, Product Marketing Manager
Sep-24

Operation “Uncle Scam”: AI-Powered Phishers Abuse Microsoft Dynamics 365 to Target US Government Contractors

In a phishing campaign dubbed “Uncle Scam,” threat actors impersonate United States government agencies to deliver fake tender invite emails to hundreds of American enterprises. …

Talia Maarek, IR Team
Aug-24

Attackers (Crowd)Strike with Infostealer Malware

This blog examines an infostealer malware campaign that targets Israeli companies, leveraging the CrowdStrike incident to lure victims into downloading a fake update.

Ariel Davidpur
Jul-24

Behind the Attack: Live Chat Phishing

In this blog, we investigate a phishing attack that leverages the inherent trust we put in live chat support.

Elad Damari, IR Team
Jul-24

A Deeper Look at Phishing Campaigns Combining URL Component Misuse & Homograph Attacks

In this blog, Roy Darnell, Director of Detection & AI at Perception Point, analyzes a phishing attempt caught in the wild that utilizes URL Component Misuse & Homograph Attacks, two obfuscation techniques that can deceive even the most vigilant browser users and some automated reputation systems.

Roy Darnell
Jun-24

Nespress-Oh No! Phishing Attack Exploits Nespresso Open Redirect Vulnerability

This blog post delves into how a Nespresso domain is being misused to redirect victims, urging urgent actions leading to the theft of Microsoft credentials.

Talia Maarek, IR Team
Apr-24

Behind the Attack: Evasive HTML Spear Phishing

In this blog we investigate how an attacker uses HTML to conduct a spear phishing campaign and evade detection.

Rafa Lopez
Apr-24

Attack Trends.