Energy Sector Phish Swims Past Microsoft Email Security via Google Drive

Energy Sector Phish Swims Past Microsoft Email Security via Google Drive

Source: Threat Post
By: Tara Seals
Published: August 15, 2019

* A targeted spearphishing campaign has hit an organization in the energy sector – after using a savvy trick to get around the company’s Microsoft email security stack. * The email was legitimately sent by Google Drive to employees – but it had one big “tell” – the email address didn’t fit the email naming convention of the targeted company. But most employees wouldn’t take the time to check that…