組織

Cloudflare Turnstile

Incidents implicated systems

インシデント 10682 Report
AI-Powered Presentation Tool Gamma Implicated in Multi-Stage Phishing Campaign

2025-04-15

Attackers reportedly exploited Gamma, an AI-powered presentation tool, to create convincing presentation pages that hosted links to a spoofed Microsoft SharePoint login portal. The phishing flow allegedly used compromised email accounts, Cloudflare Turnstile for bot evasion, and adversary-in-the-middle (AiTM) tactics to validate credentials in real time and capture session cookies. The campaign aimed to bypass MFA and compromise accounts.

もっと

Entity

Unknown threat actors

もっと
Entity

Unknown threat actors leveraging Gamma

もっと
Entity

Unknown AiTM phishing campaign actors

もっと
Entity

Gamma

もっと
Entity

Microsoft

もっと
Entity

Microsoft SharePoint users

もっと
Entity

Recipients of phishing emails sent from compromised accounts

もっと
Entity

Enterprises relying on Microsoft 365 and identity services

もっと
Entity

Organizations whose employees interacted with Gamma-hosted phishing content

もっと
Entity

Microsoft SharePoint

もっと
Entity

Compromised email accounts

もっと
Entity

AiTM phishing frameworks

もっと