Cyber Defense eMagazine March Edition for 2022

Phishing Techniques in Disguise: What to Look for And
Why You Should
By By Rotem Shemesh, Lead Product Marketing Manager, Security Solutions, at Datto
Phishing is a familiar concept to cybersecurity professionals - and hackers. According to a recent study,
phishing attacks are the method of choice of cyber criminals attempting to infiltrate an organization. Why?
Because they are easy to deploy and the opportunity for human error when clicking on a phishing email
is high.
When many of us hear the term “phishing” we may picture an obvious spam email that came from an
easily recognizable fake email address. But it isn’t always that simple to spot a phishing attempt. It’s
important to educate organizations on ways to avoid falling victim to phishing attempts, including how to
identify the different shapes they can come in. Recently, Datto SaaS Defense detected a threat that was
disguised as a communication hosted on a trusted domain, which enabled the attackers to operate below
the radar of detection.
New technique bypasses security detection
This new phishing technique included two key elements that made it impossible for most security
solutions to detect. The attack leveraged Adobe InDesign hosting reputation to hide a malicious link in
an inframe. With the goal of harvesting users’ credentials, the attack was sent via email to lure users into
clicking a link to access a shared document. The link directed people to a fake webpage designed using
Cyber Defense eMagazine – March 2022 Edition 74
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.