Skype Phishing Attack Targets Remote Workers’ Passwords

[silversurfer]

Attackers are sending convincing emails that ultimately steal victims’ Skype credentials.

Remote workers are being warned of a new phishing campaign targeting their Skype passwords.
 
The phishing emails look “eerily similar” to a legitimate Skype notification alert, according to a report released by Cofense on Thursday. Emails indicate users have 13 pending Skype notifications that can be checked by clicking a “Review” button.
 
“It is not uncommon to receive emails about pending notifications for various services,” researchers wrote. “The threat actor anticipates users will recognize this as just that, so they take action to view the notifications. Curiosity and the sense of urgency entice many users to click the ‘Review’ button without recognizing the obvious signs of a phishing attack.”

Read more: https://threatpost.com/skype-phishing-at...ds/155068/