Google And Microsoft Users Warned—Rockstar 2FA Bypass Attacks Incoming

Q: How long will it take to read this news story?

The story "Google And Microsoft Users Warned—Rockstar 2FA Bypass Attacks Incoming" has 30 words across 27 sentences, which will take approximately 1 minutes for the average person to read.

Q: Which news outlet covered this story?

The story "Google And Microsoft Users Warned—Rockstar 2FA Bypass Attacks Incoming" was covered 15 hours ago by Forbes, a news publisher based in United States.

Q: How trustworthy is 'Forbes' news outlet?

Forbes is a fully independent (privately-owned) news outlet established in 1917 that covers mostly startups and technology news. The outlet is headquartered in United States and publishes an average of 25 news stories per day. It's most recent story was published 13 hours ago.

Q: What do people currently think of this news story?

The sentiment for this story is currently Neutral, indicating that people are not responding positively or negatively to this news.

Q: How do I report this news for inaccuracy?

You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.<ul><li>News ID: #23947255</li><li>URL: https://beamstart.com/news/google-and-microsoft-users-warnedrockstar-17328901</li></ul>

Forbes Logo Forbes 15h ago

Google And Microsoft Users Warned—Rockstar 2FA Bypass Attacks Incoming - Forbes

Quick Summary:

The attackers use a document-themed lure where the body text is actually contained within an image.“The image is anchored with a link to a OneNote document,” the researchers explained, “this image-based approach helps attackers evade text-based detection mechanisms.

This used a new method of URL redirection by way of OneDrive to host the URL shortcut files.“In this case,” Trustwave said, “unsuspecting users who click on the .url file are automatically redirected to the phishing landing page via a new browser tab.” It’s a seamless redirection technique that effectively hides the actual destination URL from the user.

That annoying Nickelback song, aren’t they all, that goes “we all just wanna be big rockstars, and live in hilltop houses driving 15 cars” seems strangely appropriate right now, with the news that the Rockstar 2FA phishing-as-a-service exploit kit is using Microsoft OneDrive and OneNote along with Google Docs in an effort to bypass 2FA on target systems.Here’s what we know.