- An old Microsoft Stream area has recently been diverted
- Many SharePoint sites with integrated videos displayed malicious content
- Microsoft quickly discussed the problem, so users should update now
A retired Microsoft area has been diverted and used in a spam campaign, experts warned.
Microsoft had a business video sharing platform called Stream, where organizations could download, manage and share video content safely. In April 2024, it was removed and replaced by Microsoft Stream on SharePoint.
The main difference is that the videos were no longer stored separately in the Stream platform, but rather on OneDrive and SharePoint, to make them more accessible via Microsoft 365 tools such as Teams, Yammer or PowerPoint.
“Appropriate action”
Today, almost a year after migration, the news appeared that the inherited domain – Microsoftstream.com – was diverted and used to display a false Amazon site announcing a Thai casino.
The biggest problem of this attack is that all SharePoint sites with old integrated videos displayed spam in their premises.
Bleeping Compompute I found a number of users complaining about the takeover on Reddit:
“This afternoon, a user reported a suspicious website on our intranet, which uses Microsoftstream.com. After an analysis, it turns out that the domain is currently redirecting to a summary website signed by” Ibiza99 “, said a user. “Here is one for you interesting.
No other information on the attack was shared, but Microsoft was quickly informed of the modification and he quickly moved to remedy the problem, declaring: “We are aware of these reports and took the appropriate measures to prevent access to the impacted areas”.
Apparently, the old estate could have been in more sinister campaigns, distributing malware via false software updates, for example. However, good news is that the attackers opted for the least harmful thing – a spam campaign.
