11 times more likely to click on malicious OneDrive links.

Four times more likely to click on malicious SharePoint links.

While these messages made up about 1% of the total sample of messages with malicious URLs, they represented more than 13% of user clicks. In the first half of 2020, Proofpoint detected 5.9 million email messages with malicious SharePoint Online and OneDrive links. In fact, Proofpoint research shows that users are seven times more likely to click on malicious SharePoint Online and OneDrive links that are hosted on legitimate Microsoft domains. Exploiting the way modern employees work such as file sharing, attacks can be more effective than ever.

Attackers leverage your users’ contacts and study their emails to understand trust relationships and map organizations.

They use your cloud and email infrastructure to host and distribute malicious content.

They compromise and take over user accounts to move laterally inside an organization, steal data, or communicate with your business partners or customers to request fraudulent wire transfers. Threat actors have followed the enterprise migration to the cloud. Users are ~7 Times More Likely to Click on Malicious SharePoint Online/OneDrive links

Onedrive sharepoint