AiTM phishing attack targeting enterprise users of Gmail

Summary

This blog is a follow-up to our recent publication which described the details of a large-scale phishing campaign targeting enterprise users of Microsoft email services.

Beginning in mid-July 2022, ThreatLabz started observing instances of adversary-in-the-middle (AiTM) phishing attacks targeted towards enterprise users of Gmail. Upon further analysis of the attack chain, we identified multiple similarities between this campaign and the previous AiTM phishing campaign targeting users of Microsoft email services.

G Suite is the business version of Gmail, and …

aitm phishing attack enterprise gmail phishing phishing attack targeting