New phishing scam has Microsoft ringing the alarm bell

Estimated reading time: 2 minutes

Microsoft is raising the alarm about a sophisticated new phishing scam. This time, cybercriminals are exploiting trusted cloud services like SharePoint and OneDrive to bypass your defenses.

These platforms are usually secure, but hackers have found ways to exploit their privacy settings, slipping through unnoticed.

How the Scam Works

Hackers steal or purchase your login credentials from the black market. Once inside your cloud storage, they upload deceptive files designed to look legitimate—like a fake Microsoft 365 login page. These files are set to “view-only” or shared with specific team members, making them seem genuine.

The danger lies in opening these files or clicking on embedded links. Doing so could expose your business to:

  • Data breaches: Hackers can steal sensitive company information, reselling it or holding your business hostage and putting your customers at risk.
  • Malware attacks: Malicious software could cripple your operations or harvest confidential data.
  • Financial ruin: Your business’s reputation is everything. Being exposed to such an attack can have devastating consequences.

Recovering from such an attack can drain resources, cost time, and damage your clients’ trust.

Simple Steps to Stay Protected

Take action now to safeguard your business:

  1. Educate your team: Ensure employees are aware of this threat and exercise caution with unexpected emails—even from familiar services.
  2. Verify senders: Double-check the source before opening shared files. If in doubt, reach out directly to confirm the sender’s identity.
  3. Use Multi-Factor Authentication (MFA): This extra security layer requires a second verification step, such as a code sent to your phone, alongside your password.
  4. Update security software: Regular updates ensure your defenses are ready to tackle the latest threats.

Protect Your Business Today

You don’t have to face these threats alone. At Leap Cloud Solutions, we specialize in bolstering security, training your team, and monitoring for attacks before they strike. Best of all? We’re located right her in Metro Vancouver, serving clients just like you.

Contact us today to fortify your defenses and keep your business safe.

Responsive. Proactive. Leap Cloud Solutions.

Why gamble with your IT investment?

“I’m tired of IT systems that are operating poorly. Tired of expensive & limited solutions that don’t scale with the business. Tired of support applying short-term bandaids to long-term problems. I want a solution that scales without any IT hassles. I want technology to be an aid, not a burden. And I want a team of experts I trust to lead the way. I’m ready.”

Well said. Let's make that happen.

“We consider Leap Cloud Solutions a part of our team. They’re very security focused. They’re responsive to our concerns, they’re always anticipating our needs with regards to technology and giving us great suggestions.”

Justin Levine

Golbey-Levine Lawyers + Advisors

"Leap Cloud Solutions is extremely responsive and thorough. We have found that throughout our communications, their team is very knowledgeable and wants only the best for their clients. Our firm is impressed."

Nolan G. Westlin

Aaron Gordon Daykin Nordlinger LLP