Back to All Attacks
Attack Details
Attack Date:
May 9, 2022
OneDrive Fake Document Credential Phishing Attack
Initial Email Content
Subject
Cash Flow Statements has been shared with you.
Body
[Recipient Email Domain] Cash Flow Statements has been shared with you
Hi [Recipient Email Address], Please see the attached Cash Flow Statements
icon [Recipient Email Domain] Cash Flow Statements.pdf
permission globe icon This link will work for [Recipient Email Address].
Open
Attack Screenshots
No items found.
No items found.
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This link-based attack impersonates OneDrive using a spoofed email address and a fake document theme to steal credentials.
Analysis Overview
Tactic
Spoofed Email Address
Goal
Credential Theft
Impersonated Party
Vector
Link-based
Theme
Fake Document
Language