• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / Sendgrid Uses Zoom Invites to Steal Credentials

Sendgrid Uses Zoom Invites to Steal Credentials

Sendgrid Uses Zoom Invites to Steal Credentials

Sendgrid Uses Zoom Invites to Steal Credentials. There’s a mix of bad news and good in the ongoing war against the world’s hackers.

For the bad news, security professionals have recently detected a sophisticated phishing campaign that uses SendGrid uses Zoom Invites, and convincing replicas of Outlook on the Web and Office 365 logins to harvest credentials.

The attack works like this: SendGrid is a trusted SMTP provider. By sending their emails through SendGrid, it’s more likely that those messages will reach their intended targets and not have built-in email security protocols block them.

The emails the group is sending are typically Zoom invitations, though invariably, once a user clicks on the link, they jump through a few hoops and end up at a convincing login page for Outlook on the Web or Office 365. Of course, these Zoom pages are fake, and any user who attempts to log in is merely handing their login credentials over to the hackers, who have collected an estimated 400,000 user names and passwords using this technique.

From there, the sky’s the limit. Armed with working user name and password combinations, the hackers behind the email phishing campaign can log into a user’s account and use that as a springboard to inject malicious code onto a target’s system with pretty much any payload that the hackers desire.

A Mistake in the Making

The group behind the Zoom invites is “Compact,” and it’s clear by the attack email design that they are a technical bunch with sophistication. There is some good news to report as well. As tech-savvy as the email attackers are, they’re mistake and misconfigure an exfiltration script. It has allowed security researchers to download multiple copies of the exfiltration code, revealing a tremendous number of details about the group’s inner workings.

It’s likely to provide a short-term victory for security professionals around the world, as they’ll likely be able to shut down large swaths of Compact’s operation. However, the group will undoubtedly learn from their mistake, and after going away for a time to lick their wounds, they’ll no doubt be back and more dangerous than ever.

March 18, 2021 Filed Under: Blog Tagged With: email scam, Hackers, Sendgrid, Zoom

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Dark Web Data Database Data Breach Email Facebook Firefox gmail Google Google Chrome government hacker Hackers information Intel iOS iPhone malware Microsoft Microsoft edge Microsoft Windows 10 office 365 pandemic Password Passwords patch Phishing Phishing emails ransomeware Ransomware security Update Vulnerability Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Apple Updates Fix Security Flaws on Most Devices March 19, 2021
  • Sendgrid Uses Zoom Invites to Steal Credentials March 18, 2021
  • Browser Wars Heat Up With Microsoft Edge Boosting Speeds March 18, 2021
  • Microsoft’s Exchange Prevents Phishing And Ransomware March 17, 2021
  • Ransomware Attackers Demand 20 Million From U.S. Kia Motors March 12, 2021

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in