![]() This particular campaign emerged in early August 2022, resulting in a spike in volume that nearly surpassed the previous high. ![]() February 2021 marks the highest peak in volume. Figure 1 shows a comparison of phishing emails that are reaching users’ inboxes and abusing Dropbox from June 2020 to September 2022. However, monthly volume from this phishing campaign has been inconsistent, dropping drastically from August to September.įigure 1: Overall Volume of Phishing Emails Abusing Dropbox and Successfully Reaching Inboxes.Ĭompared to other campaigns abusing Dropbox, the volume of phishing emails within this campaign that are reaching end users attained a peak that we haven’t seen since early 2021. These phishing emails reached inboxes in August at a volume far out scaling any other campaign that Cofense has seen effectively abuse Dropbox this year. By utilizing various tactics, techniques, and procedures (TTPs), the phishing emails have been very successful at reaching inboxes. The threat actor(s) behind the campaign have put in a considerable amount of effort in order to increase the chances of successfully stealing the email login credentials of enterprise users. During August and September of 2022, Cofense has observed an effective credential phishing campaign abusing Dropbox and reaching end users across many industries.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |