Underground Markets Make Office 365 Phishing and Credential Theft Easier to Buy
Summary
Huntress examines forum listings offering fake Office 365 login pages, phishing templates and bulk credentials, illustrating how underground services make phishing and business email compromise easier to outsource.
Key points
- A seller advertised a fake Office 365 login page for $150; the page was described as emailing captured usernames and passwords to the buyer.
- Forum listings offered phishing templates for banking, social media and productivity services, as well as Office 365 accounts reportedly priced at $2 each with a 100-account minimum.
- One listing sought help phishing a private database of CEOs and CFOs using Office 365.
- A seller claimed some offered accounts had administrator-panel access and used a screenshot purportedly from NBS Telecom as proof; the article does not independently verify the claim.
- Huntress argues that specialization and outsourcing in underground markets make phishing and credential theft more accessible to other criminals.
Article Details
- Topic
- Commercialization of cybercrime through underground-market sales of phishing services and compromised Office 365 credentials.