Sélectionner une page
Retarus Press Release

Phishers are Posing as Contract Partners to Access Company Data

Fraudsters take aim at active directory passwords

Paris, 01/09/2020 // The CERT at Retarus has issued a warning regarding phishing emails in which recipients are instructed to edit important business partner contracts. The phishers pretend to make the document available on the otherwise reputable Dotloop platform, directing the recipients to a fake login page for their Microsoft account.

The fraudulent emails bear the Microsoft logo as well as Dotloop’s official email boilerplate. Dotloop is a US-based platform for conducting real estate transactions in a legally compliant manner. The phishing attack becomes apparent after the recipient has clicked on the button intended to open the contract document. The link leads to a fake Microsoft page, where victims are requested to log in using their email credentials. By looking closely at the browser’s address field, it become clear the address is not to be trusted.

Phishing

“With this password, users are not only granting access to their emails,” underlines Martin Mathlouthi, Product Line Manager Secure Email Platform at Retarus. “As single sign-on is commonplace, this is also likely to be the password for the active directory, allowing the phishers to gain access to other critical company data.”

Avoid online fraud

These phishing mails currently in circulation confirm a trend that security experts at Retarus had already been observing. Poorly designed phishing mails with long, cryptic links and clumsy instructions in error-ridden English are now a thing of the past. The new generation of phishing emails are technically sophisticated, well-formulated, and professionally designed. The shape-shifting scammers disguise themselves as colleagues, supervisors, and business associates, even addressing their victims in the name of official institutions, renowned financial service providers, and online portals.

The Retarus’ Anti-Phishing Guide, which is available for free download, details how employees can best protect themselves from phishing emails (even when working from home), which details to use to recognize well-crafted fraudulent emails, and the best practices for when it is unclear if a message is genuineThe analysts at Forrester also describe what to look out for in an anti-phishing service, and outline the various methods commonly used to defend against phishing in their Now Tech: Antiphishing Solutions, Q1 2019 report.

Advanced Threat Protection

Retarus’ Secure Email Platform provides comprehensive protection, even from highly deceptive phishing emails, by virtue of its Advanced Threat Protection. This includes Time of Click Protection, which checks links contained in emails in real time and effectively blocks phishing websites.

Retarus Time of Click Protection

À propos de Retarus

Retarus est un fournisseur global de solutions Cloud permettant de moderniser et de sécuriser les communications numériques et l'échange de données des entreprises et des organisations publiques. Les principaux services proposés sont le Cloud Fax, le SMS, Transactional Email et Email Security. Retarus exploite des data centers répartis dans le monde entier, fournissant ces solutions développées en interne avec une performance, une sécurité et une protection des données maximales. Retarus, dont le siège social se trouve à Munich, a été fondée en 1992, est gérée par ses propriétaires et est fière de sa capacité d'innovation. L'entreprise emploie environ 500 personnes, dans 20 succursales réparties sur quatre continents. Près de la moitié des entreprises cotées au S&P Global 100 font déjà confiance à Retarus et confirment, tout comme les analystes de premier plan, l'excellente qualité et la fiabilité de ses services. Retarus fournit ses produits à la fois en direct et en étroite collaboration avec des partenaires sélectionnés. Plus d'informations sur : www.retarus.fr

Press Contact Form

  • Hidden
  • Hidden
  • Ce champ n’est utilisé qu’à des fins de validation et devrait rester inchangé.

Salle de presse

Pour voir tous les communiqués de presse, visitez notre centre de presse.

Partager:

Download

Pictures // 500 KB
Notre matériel visuel, audiovisuel et photographique est gracieusement mis à votre disposition, sans restrictions, à des fins éditoriales. Qu'il s'agisse de Presse écrite, en ligne, nationale ou internationale.

Restez informé

Vous souhaitez être régulièrement informé des nouveautés de Retarus ? Aucun problème ! Avec nos newsletters vous êtes toujours au courant.

Retarus Presse

retarus (France) SAS
Département Presse
59, rue de Ponthieu
Bureau 326
75008 Paris
France
 
+33 1 871663 00
+33 1 871663 10
press@fr.retarus.com