Summary

  • Palo Alto Networks’Unit 42 report findings show a phishing campaign targeting at least 20,000 European users of chemical, industrial compound manufacturing and automotive companies.
  • The threat actor conducted a phishing operation that led the victims to a credential harvesting page.
  • The threat actor not only targeted these organizations but also made several attempts to take over victims’ Microsoft Azure cloud infrastructure.
  • The threat actor scanned the control panel from the same phishing infrastructure used in the campaign.
  • Organizations can protect themselves from such phishing attempts by implementing security measures across several areas.
  • Some of these include secure configuration, network security, zero trust implementation, and system hardening and secure account management.
  • Palo Alto Networks has shared these findings with its fellow Cyber Threat Alliance members.

Original Article