Hackers abused the Glitch platform to spread phishing emails in an attempt to swindle Microsoft 365 accounts.

CTOnews.com, July 12 / PRNewswire-FirstCall-Asianet /-- Internet security analysis company Vade has revealed that hackers have used Glitch, which provides website hosting services, to set up phishing email servers on the platform and carry out phishing email attacks against Microsoft 365 users.

▲ source Vade it is learned that hackers carry HTML attachments containing JavaScript code in their phishing emails. Once the recipient opens the attachment according to the instructions in the email, he will see a phishing web page disguised as Microsoft 365. in this step, many careless users will enter their account passwords and take the initiative to give their information to the hacker.

▲ image source Vade researchers analyzed the HTML code and found that the hacker's phishing email was derived from the name eevilcorp [.] Online issued that the phishing website was actually set up on the website escrow service Glitch, and the hackers abused the relevant escrow service and bypassed the relevant network security system to distribute and distribute such phishing files.

▲ image source Vade in addition to Microsoft 365 users, the researchers also noticed that hackers also sent phishing emails in the name of logging in to Adobe Document Cloud, asking the recipient to log on to the disguised website and enter Office 365, Outlook, AOL or Yahoo! Account password information for authentication.

For a long time, phishing emails and websites have not been "technical" but difficult to prevent hacking. CTOnews.com reminded the majority of small partners to pay attention to the correctness of the URL when they receive any link to the website that requires an account password.