Apr 6, 2022
Hackers have found a clever new way to steal your Microsoft 365 credentials
Posted by Shubham Ghosh Roy in category: cybercrime/malcode
Cybercriminals have started using Static Web Apps, an Azure service, in their phishing attacks against Microsoft 365 (opens in new tab) users.
Researchers from MalwareHunterTeam noted Static Web Apps have two features that are being abused with ease — custom branding for web apps, and web hosting for static content such as HTML, CSS, JavaScript, or images.