Fake DocuSign and HubSpot phishing emails target 20,000 Microsoft Azure accounts

• Unit 42 says phishing campaign targeted automotive, chemical, and industrial compound manufacturing industries
• More than 20,000 victims were successfully targeted
• The campaign has been disrupted, but users should still be on their guard

Hackers of potentially Russian or Ukrainian origin have been targeting UK and EU organizations in the automotive, chemical, and industrial compound manufacturing industries with advanced phishing threats, experts have warned.

A report from Unit 42, Palo Alto Networks’ cybersecurity arm, claims to have observed a campaign that started in June 2024, and was still active as of September. The goal of the campaign was to grab people’s Microsoft Azure cloud accounts, and steal any sensitive information found there.