Infecting a worker’s computer cloud system not only gives scammers access to confidential company information, it can also provide them with an opportunity to impersonate the worker using their professional email account.
The phishing may start with an email designed to resemble a legitimate company, and contain a fake invoice or merely ask the recipient to review a document that looks like an HTML file, but is actually a downloadable PDF.
A new report by Netskope, a software company providing computer security, looked at ways cybercriminals were gaining access to people’s work computer systems. The most popular way? Through the cloud.
Google Drive
GOOG,
was the top app for malware downloads in 2021, taking over the No. 1 spot from Microsoft OneDrive
MSFT,
The percentage of malware downloads from cloud apps hovered at 66%, up from 46% in 2020.
“More than half of managed cloud app instances are targeted by credential attacks, while the sources of such attacks shift from a few heavy hitters to a more decentralized attack,” the authors of the report wrote.
“‘Attackers create their own free accounts, upload malicious payloads, and share them publicly or with specific victims.’”
…
