As per a 2019 Verizon Report, 94% of malware in all cybercrimes gets delivered via email. Thus, using emails to spread malware is a common cyber-attack strategy. Phishing emails aim to steal sensitive user information under the pretense of seeking identity verification, subscription confirmation, payment, etc. Phishing emails are used to launch various attacks, but the most common ones are BEC scams, spear phishing, whaling, and ransomware attacks.
MS Office 365 is one of the tools used by almost every business organization, regardless of whether it is big or small. It is a multi-system platform that combines functions like email, data storage, collaboration, and seamless integration of productivity applications such as OneDrive and SharePoint.
All these tools are, without doubt, valuable to the users and organizations as it smoothens the functioning of the business. However, such a bulk of user data online at one place makes MS Office 365 a mouthwatering target for phishing scams too.
The time when you’re most vulnerable is when you think you’re not. Think about it. If you think you’re vulnerable, you’re likely to do something about it. But if you think you’re okay, you’re likely to rely on the status quo. And that’s the problem Office 365 users are facing right now. They don’t think they’re vulnerable, but they are.
Office 365 comes with email security native to the application, but it must not be very good. How else can you explain the effort hackers put into exploiting Office 365 users AND the success they’ve had doing it?
According to CPO Magazine, “A new phishing attack is being used to steal user credentials from Microsoft SharePoint and OneDrive users. The attack method is reportedly designed to resemble an ordinary Office 365 permissions page [and] takes on the appearance of a credible Office 365 Add-In.”
Office 365’s security features won’t protect users from all cyber security threats.
Microsoft’s cloud-based Office 365 user base is growing at a steady rate. Since the office platform first outperformed Google Apps in 2015, it’s seen a constant uptick in activity.
Now, Microsoft reports it counts its Office 365 users in the hundreds of millions. However, enterprise usage does not always equal enterprise value – particularly when it comes to cybersecurity as it misses out providing office 365 advanced threat protection for users.