Spoofed logos created with HTML tables allow attackers to bypass brand impersonation protections. In one recent case, an attacker created a graphic resembling the Microsoft logo by using a 2×2 HTML table and CSS styling to closely match the official branding.
We have observed attackers using HTML tables to imitate the logos and branding of trusted organizations. Brand impersonation with procedurally-generated graphics Through security solutions such as Microsoft Defender for Office 365 and the broader Microsoft 365 Defender, we deliver durable and comprehensive protection against the latest attacker trends. We use the knowledge we gain from our investigations to improve customer security and build comprehensive protections. Although the examples we present were primarily seen in credential theft attacks, any of these techniques can be easily adapted to deliver malware.īy spotting trends in the threat landscape, we can swiftly respond to potentially malicious behavior. We’ve observed attackers employ these tricks to gain initial access to networks. Brand impersonation with procedurally-generated graphics.They hide text from users, masquerade as the logos of trusted companies, and evade detection by using common web practices that are usually benign: We’ve chosen to highlight these techniques based on their observed impact to organizations, their relevance to active email campaigns, and because they are intentionally designed to be difficult to detect. This blog shines a light on techniques that are prominently used in many recent email-based attacks. We closely monitor these kinds of trends to gain insight into how best to protect customers. An obscure Unicode character in a few emails is innocuous enough, but when a pattern of emails containing this obscure character accompanied by other HTML quirks, strange links, and phishing pages or malware is observed, it becomes an emerging attacker trend to investigate. With the massive volume of emails sent each day, coupled with the many methods that attackers use to blend in, identifying the unusual and malicious is more challenging than ever. Microsoft Purview Data Lifecycle Management.Microsoft Purview Information Protection.Information Protection Information Protection.Microsoft Purview Communication Compliance.Microsoft Purview Insider Risk Management.Risk Management & Privacy Risk Management & Privacy.Identity Threat Protection Identity Threat Protection.Identity & access management Identity & access management.
0 kommentar(er)
