FlagThis

ImgSrc: img.helpnetsecu

References :

• BleepingComputer: A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials.
• The Hacker News: HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft
• CyberInsider: Threat Actors Exploit HubSpot to Harvest Microsoft Azure Credentials
• Virus Bulletin: Palo Alto Unit 42 researchers investigate a phishing campaign targeting European companies. The campaign aimed to harvest account credentials and take over the victim’s Microsoft Azure cloud infrastructure.
• techacademy.online: HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft
• Dataconomy: A phishing campaign targeting manufacturing companies in Europe has compromised around 20,000 Microsoft Azure accounts using HubSpot and DocuSign.
• Techzine Global: Hackers, through a phishing campaign using malicious DocuSign files, are attempting to target long-term presence mainly in Azure cloud environments of European companies.

Classification:

• HashTags: #Azure #Phishing #DataBreach
• Company: Microsoft
• Target: Microsoft Azure users
• Product: Microsoft Azure
• Feature: Phishing
• Type: Hack
• Severity: Major