Hackers hide behind Microsoft's own websites to get past email filters and launch phishing campaigns
- Attackers abused Microsoft Power BI dashboards to lure victims into downloading ScreenConnect software
- Public dashboards mimicked blurred documents and redirected users to attacker-controlled sites
- Campaign established persistent remote access, potentially enabling ransomware, espionage, or data theft
Microsoft's Power BI has seemingly become the latest in an ever-growing line of legitimate software being abused in phishing attacks.
Security researchers Huntress said they uncovered a new campaign that leverages publicly accessible Power BI dashboards to trick people into downloading remote monitoring and management software (RMM) called ScreenConnect. The end game of the campaign is not known at this time.
Power BI
Power BI is Microsoft’s business intelligenceand data visualization platform, allowing users to create charts, reports, and various dashboards, out of their data and other raw information. The tool itself can collect data from sources such as spreadsheets, databases, cloud services, and more, and users can publish reports and dashboards...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
