Skip to main content

Upheads Login Protection

(implemented to our Evergreen customers)

Contact us for more information

Have you received an email that looks like it comes from a reliable source, but is actually a scam? Where you have to log in to access a supposed service?

Then you may have been the target of an AiTM/EvilProxy attack. Unfortunately, this is something that doesn't seem to be decreasing, quite the opposite. With Uphead's Login Protection, we help you understand when you are under attack.

WeSafe0540 1_webb

Meet Marcus, our Security Team Leader who is happy to help you secure your Microsoft 365 environment

But what exactly is AiTM? Or Evilproxy?

Adversary in the Middle (AiTM)
This is a type of attack in which a malicious actor 'inserts' itself between a user and an online service. During AiTM attacks, a user interacts with a fake website created by the attacker.

This allows the attacker to steal login credentials and cookies. These can then be used to bypass multi-factor authentication (MFA) and perform other attacks against you. For example, it could be a fake login to your work email and identity theft.

EvilProxy
This is a phishing threat that targets Microsoft 365 accounts. The attackers use sophisticated Adversary-in-the-Middle (AiTM) phishing techniques. They pretend to be well-known and trusted services, such as DocuSign, Adobe or Concur.

Why Upheads Login Protection?

If you are tricked into visiting a fake site, it will appear to be a legitimate site. For example, it might look like this:

Image: Fraud site in Microsoft guise

Don't be fooled

The "service" will be activated if you start entering user details on the fraud page. The login page will change color to orange, and we will send a warning not to continue.

Image: Warning from Upheads

What is included in Upheads Login Protection?

Do you encounter a fake login page trying to steal your data? Our service will immediately identify the threat and visually warn you. The page will change color to orange, clearly indicating that you should cancel the process.

Whether you use a computer, smartphone or tablet, our protection is active across all your devices. This gives you the freedom to work and communicate safely from any location.

Specially designed to protect your Microsoft 365 environment, Uphead's Login Protection secures company data against phishing attacks and unauthorized access.

If a potential threat is detected, we send not only a visual alert, but also a detailed warning to your email. This allows you to take action quickly and protect your information.

[ Want to know more about Upheads Login Protection?]

Get in touch - we are happy to tell you more!

Tired of filling in forms?

You can also call 040-626 75 00, Monday-Friday 08-17, or send an e-mail to kontakt@upheads.se.