Monday.com removes feature after it was abused in phishing attacks
Popular project management and collaboration tool Monday.com was forced to disable one of its features after it was abused by a threat actor to send out phishing emails.
The “Share Update” feature allows users to share real-time updates, progress, or important information with team members, or stakeholders. Users can post updates, attach files or images, mention specific team members, and even set up automatic notifications for certain updates.
But a threat actor has now hijacked the feature to send out mass emails to people outside their account, leading to monday.com having to temporarily disable it.
No customer data compromised
The company told BleepingComputer it was made aware of phishing emails seemingly coming from its email accounts. The emails were sent via SendGrid, and were coming from the [email protected] address. They passed SPF, DMARC, and DKIM authentications.
The messages pretended to come from the Human Resources department and asked the recipients to acknowledge the “organization’s workplace sex policy” or submit feedback as part of a “2024 Employee Evaluation.”
In the body of the email was a link, shortened with an URL shortener service, leading to a phishing form hosted on formstack.com. Since the forms have been removed in the meantime, we don’t know what kind of information the attackers were after. We also don’t know how many of these emails were sent.
“Unfortunately, a user misused this feature by sending a phishing message. We promptly suspended this user and removed the feature,” the company confirmed to the publication in a statement. “This feature has no connection to data hosted on monday.com or access to any customer accounts or data. We have reached out and shared precautions with the email recipients of the phishing message.”
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Monday.com is a major project management platform, used by the likes of Uber, Canva, Coca-Cola, and others.
More from TechRadar Pro
Popular project management and collaboration tool Monday.com was forced to disable one of its features after it was abused by a threat actor to send out phishing emails. The “Share Update” feature allows users to share real-time updates, progress, or important information with team members, or stakeholders. Users can post…
Recent Posts
- Netflix movie of the day: Jack Black is back for more martial arts madness in Kung Fu Panda 3
- Social media users are blocking celebs to support Palestine
- Thousands of Linux servers infected by Ebury malware
- Microsoft PowerToys Is the Ultimate Windows 11 Customization Tool
- We gotta stop ignoring AI’s hallucination problem
Archives
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011