Crypto Phishing Attacks Abuse Google Looker Studio

Scam tactics

• The convincingly crafted email encourages Gmail users to click the provided link to claim their earnings.
• Once clicked, the link takes the target to fake web pages that feature a Google Slideshow promising cryptocurrency rewards. However, at this point, the displayed prize has been increased to 1.35 BTC, equivalent to $34,700. 
• The users are asked to provide their cryptocurrency wallet login information to claim this reward, and there's a timer that creates a sense of urgency, making it more likely to overlook clear signs of deception. 
• Any Google login details entered on this page are taken by cybercriminals, who can then use them to gain unauthorized access to other accounts.

Some latest phishing threats

• Late last month, Microsoft warned of an increase in Adversary-in-the-Middle (AiTM) phishing techniques, which allow attackers to carry out large-scale phishing campaigns and steal session cookies without detection.
• Researchers found a new TZW ransomware, belonging to the Adhubllka family, spreading via phishing emails to target individuals and small businesses.

The bottom line