Cybercriminals are conducting phishing campaigns using Russian domains

Hackers are often using TikTok and Google mobile to carry out attacks, and the distribution of Microsoft Office documents with malicious attachments has increased by almost 600%.

As noted in a report by The Cofense Phishing Defense Center, malicious Office documents, especially in the .docx format, often contain phishing links or QR codes that direct victims to malicious websites. This is reported by the Center for Strategic Communications and Information Security.

Cofense Vice President of Global Threat Services Josh Bartholomew stressed that «malicious emails are bypassing the email protection perimeter at an alarming rate – this indicates that attackers are conducting innovative phishing campaigns faster than technology can stop them».

A change in data theft tactics is also being recorded with the increased use of the .ru and .su (USSR) top-level domains – hackers are turning to less common and geographically related domains to avoid detection and make it difficult for victims to track the thefts.