Back to All Attacks
Attack Details
Attack Date:
Apr 29, 2022
SharePoint Fake Document Credential Phishing Attack
Initial Email Content
Subject
Shared File from 40895783234
Body
New Document Shared for Review!
From a Personal/Business Computer:
Open the enclosed attachment:
Note: the image above is only the first of the attached document.
To view more than the first page, Open the attachment or..
GoTo Documents
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This link-based attack impersonates SharePoint using an external compromised account and a fake document theme to steal credentials.
Analysis Overview
Tactic
External Compromised Account
Goal
Credential Theft
Impersonated Party
Vector
Link-based
Theme
Fake Document
Language