Perception Point Blog Archive: Attack Trends

Quishing 2.0: QR Code Phishing Evolves with Two-Step Attacks and SharePoint Abuse

In a new quishing campaign discovered by Perception Point’s security research team, threat actors took QR code phishing to a whole new level.

Peleg Cabra, Product Marketing Manager
Sep-24

Rewriting Hysteria: Rising Abuse of URL Rewriting in Phishing

In recent months, threat actors have discovered a troubling new method to exploit URL rewriting, a feature intended to protect users by replacing links in emails. By manipulating these rewritten URLs, attackers mask highly evasive phishing links behind trusted domains of security vendors, effectively bypassing detection. This abuse has led to a critical surge in advanced phishing attacks that leverage the very tools developed to prevent them.

Peleg Cabra, Product Marketing Manager
Aug-24

Operation “Uncle Scam”: AI-Powered Phishers Abuse Microsoft Dynamics 365 to Target US Government Contractors

In a phishing campaign dubbed “Uncle Scam,” threat actors impersonate United States government agencies to deliver fake tender invite emails to hundreds of American enterprises. …

Talia Maarek, IR Team
Aug-24

Attackers (Crowd)Strike with Infostealer Malware

This blog examines an infostealer malware campaign that targets Israeli companies, leveraging the CrowdStrike incident to lure victims into downloading a fake update.

Ariel Davidpur
Jul-24

Behind the Attack: Live Chat Phishing

In this blog, we investigate a phishing attack that leverages the inherent trust we put in live chat support.

Elad Damari, IR Team
Jul-24

A Deeper Look at Phishing Campaigns Combining URL Component Misuse & Homograph Attacks

In this blog, Roy Darnell, Director of Detection & AI at Perception Point, analyzes a phishing attempt caught in the wild that utilizes URL Component Misuse & Homograph Attacks, two obfuscation techniques that can deceive even the most vigilant browser users and some automated reputation systems.

Roy Darnell
Jun-24

Nespress-Oh No! Phishing Attack Exploits Nespresso Open Redirect Vulnerability

This blog post delves into how a Nespresso domain is being misused to redirect victims, urging urgent actions leading to the theft of Microsoft credentials.

Talia Maarek, IR Team
Apr-24

Behind the Attack: Evasive HTML Spear Phishing

In this blog we investigate how an attacker uses HTML to conduct a spear phishing campaign and evade detection.

Rafa Lopez
Apr-24

Operation PhantomBlu: New and Evasive Method Delivers NetSupport RAT

A malware campaign employs new TTPs and behaviors to evade detection and deploy NetSupport RAT.

Ariel Davidpur, Security Researcher
Mar-24

Ensuring Browser Integrity for Customer Support: Preventing an Evasive Help Scout Phishing

In an era where customer support SaaS platforms like Help Scout and Zendesk have long been integral to business operations, these apps have also become…

Ariel Davidpur, Web Security Expert
Feb-24

Quishing Attack Bypasses OCR With Password-Protected PDFs

In this blog we explore an emerging quishing technique that leverages password-protected PDFs to evade OCR detection.

Talia Maarek, IR Team
Jan-24

Attackers Target Hotels to Gain Booking.com Credentials

Attackers are targeting the hospitality industry, hoping to gain Booking.com credentials.

Elad Damari, IR Team
Jan-24

Attack Trends.