Microsoft confirmed that hackers are now using an old and unusual method to conduct phishing attacks. The tech giant firm explained that online attackers and other cybercriminals now rely on Morse code to evade security detection.
This is currently a unique method since most cyber attackers prefer to use advanced systems since companies and agencies are integrating enhanced security features into their software and other products.
Since the Morse code is a new efficient hacking or phishing tactic, Microsoft said it had conducted a year-long investigation on the new invoice-themed XLS.HTML phishing campaign.
Microsoft said it discovered that the hackers behind the new phishing method change their encryption and obfuscation mechanisms every 37 days, which is regularly conducted. This means that their new tactic is efficient in constantly evading detecting and keeping the credential theft operation running.
"This phishing campaign exemplifies the modern email threat: sophisticated, evasive, and relentlessly evolving," added the search engine giant.
Microsoft Explains How Morse Code Phishing Works
According to Windows Central's latest report, the new Morse code phishing campaign uses a fake Microsoft 365 login to lure unsuspecting victims. The search engine giant also added that the malicious credentials screen also shows a Microsoft logo and the company logo of a potential victim.
On the other hand, Microsoft Security Blog reported that the hackers behind the new phishing attack hide their hacking segments by moving from the plaintext HTML code to multiple encoding techniques, specifically Morse code.
In other news, a new ransomware universal decryption tool was recently leaked. This technology was used to obtain sensitive files stolen by REvil.
How Effective is Morse Code Phishing Method?
The giant tech firm explained that the new phishing technique is comparable to solving a jigsaw puzzle. Microsoft confirmed that using Morse code is a great hacking method since it could easily bypass security solutions.
Because of this, the search engine giant uses multiple layers of dynamic protection technologies, which are supported by security expert monitoring.
For more news updates about the new Morse code phishing campaign and other malicious activities, always keep your tabs open here at TechTimes.
Related Article : Microsoft Files 'Administrative Protest' After Amazon Gets $10 Billion Cloud Computing JEDI Contract
This article is owned by TechTimes
Written by: Griffin Davis