Cloud collaboration platforms exploited in phishing attacks

Popular cloud collaboration and file sharing platforms like Adobe, DocuSign, Dropbox, Canva, and Zoho are being misused in phishing attacks due to their widespread adoption by businesses and individuals. Research by Cofense finds 8.8 percent of all credential phishing campaigns in 2024 used these websites. Among campaigns exploiting these online document sites 79 percent of all cases containing the domains were credential phishing attacks. Because these are all trusted domains, commonly used both by the public and with internal documents at companies, many secure email gateways (SEGs) automatically allow links to them to enter user email inboxes. Some services also… [Continue Reading]