Penka Hristovska
Wani sabon yaƙin neman zaɓe yana yiwa masu amfani da kamfanoni hari ta hanyar asusun imel ɗin da ba su dace ba don rarraba fayilolin PDF da aka shirya akan Autodesk Drive, a cewar kamfanin tsaro na yanar gizo Netcraft.
A cikin al'amuran da aka ruwaito, masu kutse sun aika da saƙon imel zuwa abokan hulɗa da ke cikin asusun, har ma suna yin kwaikwayon sa hannun masu aikawa na asali, gami da sunan mai aikawa da sunan kamfani don sa imel ɗin ya zama abin gaskatawa.
Netcraft bayanin kula "Waɗanda aka azabtar suna da yuwuwar danna hanyar haɗin da aka raba lokacin imel ɗin ya fito daga mutum ko kasuwancin da suka rigaya aiki da su, musamman lokacin da aka ba da imel tare da sa hannu da sauran bayanan tuntuɓar da za su sa ran gani."
Jikin imel ɗin ya haɗa da gajeriyar hanyar haɗin yanar gizon da ke kaiwa zuwa PDF na ɓarna akan Drivedesk Drive.
“Hanyoyin da ke cikin imel ɗin phishing suna amfani da gajeriyar URL ta autode.sk, wanda Bitly ke ba da ƙarfi. An yi nufin Autodesk Drive don raba fayilolin ƙira a cikin gajimare, kuma yana tallafawa nau'ikan fayilolin bayanai na 2D da 3D gami da PDFs. Yana da kyauta don amfani lokacin biyan kuɗi zuwa wasu samfuran Autodesk, ”in ji Netcraft.
Lokacin da masu karɓa suka danna hanyar haɗin yanar gizon don gwadawa da buɗe takaddun, ana tura su zuwa shafi na phishing wanda ke neman sunan mai amfani da kalmar sirri na asusun Microsoft. Da zarar wanda aka azabtar ya shigar da takardun shaidarsa, ana tura su zuwa wani takarda akan OneDrive game da saka hannun jari na gidaje, suna ɓoye gaskiyar cewa an sace bayanan shiga su.
"Masu dauke da bayanan Microsoft wadanda abin ya shafa, masu aikata laifukan da ke bayan wadannan hare-haren na iya samun damar shiga bayanan kamfani ba tare da izini ba, tare da samun damar aika ma da karin saƙon saƙon saƙo daga asusun Microsoft ɗin da aka lalata," in ji Netcraft.
Kamfanin tsaro na intanet ya kara da cewa maharan sun kera hare-harensu zuwa kasashe da yankuna daban-daban, kamar yadda muggan PDFs suka nuna a cikin harsuna daban-daban a Autodesk Drive.
"Matsalar waɗannan hare-haren da kuma yin amfani da takaddun PDF na musamman yana ba da shawarar wasu nau'i na gwaji da aiki da kai, wanda ke haifar da jerin abubuwan da aka tsara da kyau wanda ke da damar yadawa a duniya kamar kwayar cuta," in ji Netcraft.
- Ƙunshin Ƙarfafa SEO & Rarraba PR. Samun Girma a Yau.
- PlatoData.Network Tsaye Generative Ai. Karfafa Kanka. Shiga Nan.
- PlatoAiStream. Web3 Mai hankali. Ilmi Ya Faru. Shiga Nan.
- PlatoESG. Carbon, CleanTech, Kuzari, Muhalli, Solar, Gudanar da Sharar gida. Shiga Nan.
- PlatoHealth. Biotech da Clinical Trials Intelligence. Shiga Nan.
- Source: https://www.safetydetectives.com/news/autodesk-drive-used-in-microsoft-phishing-scams/
