Hijacked Microsoft web domain injects spam into SharePoint servers

The legacy domain for Microsoft Stream was hijacked to show a fake Amazon site promoting a Thailand casino, causing all SharePoint sites with old embedded videos to display it as spam. Microsoft Stream is an enterprise video streaming service that allows organizations to upload and share videos in Microsoft 365 apps, such as Teams and SharePoint. Video content hosted on Microsoft Stream was accessed or embedded through a portal at microsoftstream.com. In September 2020, Microsoft announced they were deprecating the Microsoft Stream classic service and moving it into SharePoint. Organizations were told to migrate their Microsoft Stream videos to the new platform by April 2024, when the service was retired. Microsoft Streams classic domain hijacked Today, the Microsoft Streams classic domain, microsoftstream.com, was hijacked to display a website imitating Amazon that acts as a phishing page for a Thai online casino, as shown below. Microsoftstream.com site showing a spam site So ... Read full article.