Be careful. Fake voicemail messages. Embed malware.

Beware of fake voicemail messages tricked into the crooked web to embed malware.

According to the official website of the NCSC (National Cyber Security Center), or the National Cyber Security Organization of Switzerland, it mentioned that in the last June, the organization received reports of Scamming by using fake Voicemail through more than usual emails, which the organization revealed that hackers or those behind it would forge emails to look like they were from Microsoft's services like Microsoft 365 or OneDrive for Business, which were forged to look like real service letters, and in another case, hackers might send threatening messages. Life, or "Death Notice," which plays with the victim's sentimentality to make the victim rush as the hacker says.

The organization has made two detailed examples:

The first pattern is that hackers attach a file inside an email called "audio_Y6CEKNH8OE.zip" claiming to have an audio file inside, along with an email that persuades the victim to open it, which, if the victim accidentally opens, will install malware on the machine immediately.

In another way, hackers use a fake link that claims to be a voicemail link. If the victim accidentally presses, it leads to a forged Microsoft service login page with an Audio Player screen. The hacker tricks the victim into pressing the "Play voicemail as guest" button and then enters a deception to steal the password to log in to the Microsoft service.

The organization has also said that the campaign is a chain phishing attack that does not end with malware victims or password theft. The accounts that hackers have gone to are sent phishing fraudulent emails based on the reliability of the email itself. This can lead to deception both within the victim's organization and outside the organization, such as sending fraudulent emails to customers and partners. The organization has recommended a way to prevent the attachment from being checked well before opening every time and do not enter the Microsoft access password from the link received via email.

# Online alarm # Trending # lemon 8 diary # Email # freedomhack