Phishing attacks are on the rise, and cyber criminals are becoming more sophisticated in their methods. Enterprises in Australia and the APAC region are being targeted through popular platforms like Atlassian, which are used as a cover to launch convincing phishing attacks on law firms and other corporations. These attacks aim to steal employee credentials and breach company cyber security defenses.
Atlassian workspaces, Japanese ISPs, and a compliance cover story
Mimecast’s Global Threat Intelligence Report 2024 H1 highlighted a new phishing tactic that leveraged Atlassian workspaces and other unified workspace platforms to send harmful emails to employees. These emails used device compliance updates as a cover story and directed employees to fake company portals to steal credentials and sensitive information.
The growing sophistication of phishing attacks
Phishing attacks using Atlassian workspaces are increasing in sophistication. Threat actors are using postmark URLs, multiple obfuscation techniques, and enlisting unsuspecting Japanese ISPs to make their attacks more convincing and harder to detect.
As phishing attacks become easier to mount and more convincing, organizations need to be vigilant and proactive in their cyber security defenses. Generative AI and machine learning are being used by both attackers and defenders, driving the evolution of phishing tactics and techniques.
Defenders must be prepared to detect and respond quickly to new and novel attack methods to protect their organizations from falling victim to phishing attacks. With threat actors diversifying their targets and tactics, it’s essential for enterprises to stay ahead of the curve in defending against cyber threats.