European Firms Hit by Sophisticated Cloud Phishing Campaign

A sophisticated phishing campaign has been observed targeting European organizations, particularly in Germany and the UK, with the goal of harvesting account credentials and compromising victims’ Microsoft Azure cloud environments. The campaign reached its peak in June 2024, leveraging fraudulent forms crafted using the HubSpot Free Form Builder service. This operation demonstrates a calculated approach by the threat actors, who successfully targeted approximately 20,000 users across multiple European companies.