Threat Actors Evade Proofpoint and Microsoft 365 ATP Protection to Capitalize on COVID-19 Fears

The Cofense Phishing Defense Center has witnessed a surge in Coronavirus phishing campaigns found in environments protected by Proofpoint and Microsoft Office 365 ATP. The threat actor inserted key words, such as who and community in the sender email address to manipulate the user into thinking its from the World Health Organization. The body of the email in Figure 4, as shown below, urges the user to find out if there are cases of COVID-19 in their local area by clicking on Read on”]

Source: https://cofense.com/threat-actors-evade-proofpoint-office-365-atp-protection-capitalize-covid-19-fears/