…Gone Phishing – Examples of Phishing Attacks

“Give a man a fish and you feed him for a day. Teach a man to PHISH and he will steal your company’s money”.

(Quote by an unfortunate phishing victim)

Criminal phishing graphic

 

E-mail exploits have been in the news a lot lately. Our inboxes are constantly under attack. The most common and lucrative for criminals method to extract passwords and other sensitive information is through phishing. A phishing attack, or a phishing scam, is when a rogue party sends an email pretending to be someone (e.g. an officer of your organization) or something he is not (e.g. Microsoft), in order to extract sensitive information out of the target. Continue reading

Configure Document Alerts in OneDrive for Business

Issue

OneDrive for Business by default only sends out email notifications when a folder or file is shared. If recipients upload a document for you (or modify – if permitted – a document you posted), how will you know? Does OneDrive for Business support file update notifications like file sharing services?

Answer

The answer is “yes”. The functionality however has been hidden away for some reason. The reasons are unclear, but likely have to do with Microsoft trying to combine functionality of OneDrive for Business with SharePoint and making it difficult for us in the process. But never fear – here’s how to set this up:

 

Continue reading

Windows Authentication fails with AWS Application ELB

While configuring an AWS Elastic Load Balancer for a customer I came across a strange issue related to Windows Authentication. Going through an internal application load balancer configured with HTTP listener, the target web server (IIS) constantly prompted for credentials and would not accept the correct ones, causing logon issues and even connections to other users’ sessions. After some investigation, I created a new network load balancer instead of the application load balancer used initially and it started working.

 

Continue reading