A targeted spearphishing campaign has hit an organization in the energy sector after using a savvy trick to get around the company s Microsoft email security stack. The campaign impersonated the CEO of the targeted company, sending email via Google Drive purporting to be sharing an important message with the recipients. The email was legitimately sent by Google Drive to employees but it had one big tell the email address didn t fit the email naming convention of the company.
Source: https://threatpost.com/energy-phish-microsoft-security-google-drive/147397/