Rise in Phishing Emails

CERT.at is currently observing an increase in successful phishing attacks originating from compromised email accounts of Austrian companies

The phishing emails aim to steal Microsoft 365 credentials, take over the account, and send further phishing emails. The phishing emails are sent to contacts stored in the address book. Since the recipient and sender know each other, the sender appears legitimate to the recipient, which increases the likelihood of further compromise.

As a result, this campaign has the potential to spread particularly effectively. At the moment, it primarily affects small and medium-sized enterprises (SMEs) in the construction industry (construction, metal fabrication, wood construction, toolmaking, and cable technology).

July 2026

More information