Website
1drv.ms
Tags
Phishing
Phishing
Attackers create a shareable link for OneDrive files which use the 1drv.ms domain. The link is then utilized to phish users and have them download malware. Alternatively, phishing pages are create using OneNote and shared with users in hopes of clicking on a link that redirects them to a malicious domain.
Command and Control
None
Exfiltration
None
Download
None
Service Provider
Microsoft
Created: 2021-11-10
Last Update: 2021-11-10
Credits: mr.d0x