Hackers Abuse Autodesk Drive For Hosting Weaponized PDF Files

Autodesk Power is an info-sharing platform for organizations to fragment paperwork and recordsdata within the cloud.

It additionally supports 2D and 3D records recordsdata, along side PDF recordsdata, which would possibly perhaps possibly presumably presumably be free to make utilize of when other Autodesk merchandise are subscribed.

Alternatively, a new attack campaign has been stumbled on.

This campaign abuses this Autodesk internet hosting platform to host malicious PDF recordsdata, which ends in phishing attacks on victims.

This phishing attack is aimed explicitly at harvesting Microsoft login credentials.

Technical Evaluation

In accordance to the experiences shared with Cyber Security News, threat actors were the utilize of compromised e mail accounts to gather and goal new victims.

The usage of compromised e mail accounts makes it much less suspicious for users to discuss over with the embedded Autodesk hyperlinks.

The emails sent by the threat actors from these compromised accounts additionally encompass the legitimate e mail signature footer.

When victims click on on the Autodesk power hyperlinks on these emails, they are taken to the hyperlinks to gape the PDF document, which mainly contains the sender’s name and the company they work for to add belief to the phishing attack.

This PDF link will possess a “VIEW DOCUMENT” possibility, which embeds one other phishing link that would possibly perhaps snatch the visiting user to a Microsoft Login fabricate.

This fabricate looks exactly like the distinctive Microsoft login fabricate, wherein the victim is asked for his or her username and password.

After coming into their credentials, they are taken to a e book about staunch property funding hosted on Microsoft’s One Power carrier.

Since OneDrive is a Microsoft-owned product, it affords the affect to the user that the document they noticed used to be intended.

Alternatively, threat actors personal harvested the credentials thru the Spoof fabricate.

Put up Phishing Ways

As threat actors now personal the victim’s Microsoft credentials, they would possibly be able to utilize them to invent unauthorized ranking entry to to sensitive company records and send many more phishing emails to goal privileged Microsoft accounts.

A outlandish habits used to be noticed, which used to be the variation in languages.

Risk actors are seen to personal computerized this phishing e mail, which adjustments the languages by the utilize of the sender’s locale.

To add proof to this speculation, an identical phishing e mail used to be sent from a Canadian manufacturing company that susceptible French within the PDF.

Organizations and staff are told to be responsive to phishing attacks.

Additionally, every login fabricate URL ought to be verified earlier than coming into the credentials.

Combat Email Threats with Easy-to-Launch Phishing Simulations: Email Security Awareness Training -> Try Free Demo