#DirectSend

[cyber-sec]

Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails

Attackers are exploiting Microsoft 365’s Direct Send feature to spoof internal users and bypass email security, delivering phishing emails without needing credentials. This tactic tricks organisations into opening malicious attachments disguised as voicemail or fax notifications.

Researchers from Varonis discovered a widespread phishing campaign abusing Direct Send, allowing unauthenticated emails to appear as legitimate internal messages. The flaw lets attackers send spoofed emails through Microsoft’s smart host, evading standard filters and risking credential theft via phishing sites. Organisations must scrutinise email headers and enforce strict DMARC and anti-spoofing policies to block these low-effort but high-impact attacks.

Source: Varonis

[payment-providers]

New Post has been published on Payment-Providers.com

New Post has been published on https://payment-providers.com/berkeley-payments-rolls-out-directsend-to-support-businesses-transfer-funds-in-real-time/

Berkeley Payments rolls out DirectSend to support businesses transfer funds in real-time

Berkeley Payments, a global payments solution provider, has launched DirectSend, a payments platform that supports real-time transfers.

Berkeley is also the first company in Canada to provide 3D Secure 2.0 for money transfer transactions, according to the official press release. DirectSend can be fully integrated into a business’ existing system and delivers real-time, business disbursements, peer-to-peer (P2P) transfers and B2B supplier payments to fit all business needs.

Additionally, the service will provide new debt repayment and collections solutions and real time loading of prepaid cards directly from consumer bank accounts. DirectSend, which is currently available in Canada and will launch in the US in the late spring, is faster than ACH, cheque and prepaid options. Through this service, payments of any monetary amount can be instituted in less than three seconds, the press release continues.

Source link