Back to All Attacks
Attack Details
Attack Date:
Jun 21, 2022

Microsoft Fake Document Credential Phishing Attack

Initial Email Content

Subject
Employee PayStub Registration
Body

Hi,


It's Almost Weekend!


This email dated Wednesday June 22nd, 2022 has been scanned and is considered safe for viewing.


rcnE ypted liamE tfosorciM


You deviecer evah an liame detpyrcne from tfosorciM Safe ®srevreS .


1 document may be related.

Employee PayStub Registration.xlsx  


Shown by Cortana


 View email  



Better with Microsoft Viva


The employee experience platform that brings it all together - empowering people and teams to be their best, from anywhere. 

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This link-based attack impersonates Microsoft using a maliciously registered domain and a fake document theme to steal credentials.

Analysis Overview

Tactic
Maliciously Registered Domain
Goal
Credential Theft
Impersonated Party
Vector
Link-based
Theme
Fake Document
Language