LogoKit Group Aims for Simple Yet Effective Phishing
A phishing kit that uses embedded JavaScript targeted the users of more than 300 sites in the past week, aiming to grab credentials for SharePoint, Adobe Document Cloud, and OneDrive.
A relatively new phishing kit uses embedded JavaScript to dynamically change elements of spoofed webpages to more easily fool users.
The adoption of the phishing tool, called LogoKit, has seemingly accelerated, with 700 domains running the kit in the past month 300 of those in only the last week and targeting users of popular domains, such as Microsoft SharePoint and OneDrive, according to an analysis by cybersecurity firm RiskIQ. The attack tool is both simple and versatile, integrating with the presentation elements of a webpage and allowing it to change the look and feel of the website on the fly, the company said.