Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks

Experts warn of phishing attacks that are combining the use of compromised Microsoft 365 accounts and .rpmsg encrypted emails. Trustwave researchers have observed threat actors using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts in a phishing campaign aimed at stealing Microsoft credentials. RPMSG files are used to deliver e-mails with Rights-Managed Email Object Protocol enabled. […]

The post Attackers use encrypted RPMSG messages in Microsoft 365 targeted phishing attacks appeared first on Security Affairs.

accounts attachments attackers attacks breaking news campaign compromised credentials cyber crime cybercrime emails encrypted experts files hacking information security news it information security messages microsoft microsoft 365 phishing phishing attacks phishing campaign pierluigi paganini researchers rpmsg stealing threat threat actors trustwave