Perception Point Blog Archive

Rewriting Hysteria: Rising Abuse of URL Rewriting in Phishing

In recent months, threat actors have discovered a troubling new method to exploit URL rewriting, a feature intended to protect users by replacing links in emails. By manipulating these rewritten URLs, attackers mask highly evasive phishing links behind trusted domains of security vendors, effectively bypassing detection. This abuse has led to a critical surge in advanced phishing attacks that leverage the very tools developed to prevent them.

Peleg Cabra, Product Marketing Manager
Nov-24

Phishing by Design: Two-Step Attacks Using Microsoft Visio Files

Perception Point’s researchers have uncovered a new type of two-step phishing attack leveraging Microsoft Visio files (.vsdx) and SharePoint. These attacks embed malicious URLs in .vsdx format files to evade detection and steal credentials.

Peleg Cabra, Product Marketing Manager
Nov-24

Evasive ZIP Concatenation: Trojan Targets Windows Users

Threat actors continually seek innovative methods to evade detection, and ZIP file concatenation has proven to be an effective tactic. By exploiting the different ways…

Arthur Vaiselbuh, Windows Internals Engineer
Nov-24

You’re Invited: Rampant Phishing Abuses Eventbrite

In a new Eventbrite phishing campaign, threat actors misuse Eventbrite’s services to steal financial or personal information.

Ofek Ronen, Machine Learning Software Engineer
Oct-24

Two-Step Phishing Campaign Exploits DocuSign’s Web Forms

In recent research, the Perception Point team uncovered a new wave of attacks abusing DocuSign's Web Forms—a feature designed for data collection and document management.

Ruth Shames
Oct-24

NIS 2 Directive: Key Facts Every Organization Needs to Know

Discover how the NIS 2 Directive will impact businesses across the EU, with stricter reporting requirements, expanded scope, and significant penalties. Learn how Perception Point helps organizations ensure compliance.

Perception Point Marketing
Oct-24

You Don’t Need an Agent to Secure Your Browser

Securing the browser has become more critical than ever, leading to the rise of browser security solutions. These solutions enhance the browser's security capabilities, offering protection against phishing, malware, risky extensions, and more.

Tal Zamir, CTO
Sep-24

Quishing 2.0: QR Code Phishing Evolves with Two-Step Attacks and SharePoint Abuse

In a new quishing campaign discovered by Perception Point’s security research team, threat actors took QR code phishing to a whole new level.

Peleg Cabra, Product Marketing Manager
Sep-24

From Threats to Trends: Highlights from Perception Point’s H1 2024 Report

Cybersecurity is a constant cat-and-mouse game, with threat actors always refining their tactics to create more sophisticated and complex attacks, pushing defenses to evolve (ideally) even more quickly.

Perception Point Marketing
Sep-24

Operation “Uncle Scam”: AI-Powered Phishers Abuse Microsoft Dynamics 365 to Target US Government Contractors

In a phishing campaign dubbed “Uncle Scam,” threat actors impersonate United States government agencies to deliver fake tender invite emails to hundreds of American enterprises. …

Talia Maarek, IR Team
Aug-24

Attackers (Crowd)Strike with Infostealer Malware

This blog examines an infostealer malware campaign that targets Israeli companies, leveraging the CrowdStrike incident to lure victims into downloading a fake update.

Ariel Davidpur
Jul-24

Two-Step Phishing Campaign Exploits Microsoft Office Forms

Attackers are abusing Microsoft Office Forms to launch sophisticated two-step phishing attacks. Office Forms are now being leveraged by threat actors to trick targeted users into divulging their Microsoft 365 (M365) credentials.

Elad Damari, IR Team
Jul-24

Blog.