--- title: OneNote Documents, Phishing & Cloud Computing Vulnerabilities description: However, it is essential to understand and plan for certain cloud computing vulnerabilities and create solutions designed... image: https://synivate.com/hubfs/Imported_Blog_Media/phishing-cloud-vulnerabilities.jpg --- [![Synivate](https://synivate.com/hubfs/Landing%20Page%20Assets/synivate_logo_WEB_200.png)](https://synivate.com) - [HOME](https://synivate.com) - [SOLUTIONS](https://synivate.com/managed-services) [**Solutions** How can we solve your business challenges?](https://synivate.com/managed-services) [**Managed IT Services** Hands-Off Managed IT | Co-Managed IT](https://synivate.com/managed-services) [**Cloud & Digital Transformation** Cloud Migrations | Professional Services](https://synivate.com/cloud) [**IT Support** Remote Support | On-Site Support](https://synivate.com/help-desk-and-onsite-support) [**Compliance** HIPAA | ISO | SOC2 | Others](https://synivate.com/navigating-compliance) [**Business Continuity** Backup Planning | Disaster Recovery](https://synivate.com/business-continuity) [**Securing Microsoft 365** 24x7 Security Monitoring](https://synivate.com/securing-office365) [**Securing Google** 24x7 Security Monitoring](https://synivate.com/securing-gsuite) [**IT Consulting** vCIO Consulting & Strategy](https://synivate.com/it-consulting) [**Cybersecurity** Ransomware Prevention | Cybersecurity Alignment](https://synivate.com/cybersecurity) - [ABOUT](https://synivate.com/about) [**About Us** What's the Synivate difference?](https://synivate.com/about) [**Meet the Team** Our Core Values | Our Promise](https://synivate.com/about) [**Case Studies** Measurable Results](https://synivate.com/casestudy) [**Testimonials** Real Clients | Real Stories](https://synivate.com/testimonials) - [CONTACT](https://synivate.com/contact) - [BLOG](https://synivate.com/blog) [+1 617-517-0704](tel:+16175170704) [BOOK A MEETING](https://synivate.com/sdr) # OneNote Documents, Phishing & Cloud Computing Vulnerabilities However, it is essential to understand and plan for certain cloud computing vulnerabilities and create solutions designed... [Sean Maguire](https://synivate.com/blog/author/seanmaguire) Feb 22, 2023 --- ![cloud computing vulnerabilities](https://synivate.com/hs-fs/hubfs/Imported_Blog_Media/phishing-cloud-vulnerabilities-400x267.jpg?width=400&height=267&name=phishing-cloud-vulnerabilities-400x267.jpg)Cloud computing and virtual storage can provide significant advantages to many different types of business models. However, it is essential to understand and plan for certain cloud computing vulnerabilities and create solutions designed to protect your sensitive data from unauthorized access. Malware and viruses are the tools of cyber criminals who seek to wreak havoc, cause damage, and steal data from businesses. Network security is an important part of any business strategy. However, a new phishing campaign has brought a whole new twist to [targeted malware attacks](https://synivate.com/cloud-computing/), using Microsoft OneNote documents to infect computers across North America and in the UK. ## Cyber Criminals and Microsoft Products With Microsoft Office being one of the most widely-used products around the globe, cyber criminals attack it frequently, hoping to infect as many computers and systems as possible. It seems as though every time the software giant makes one big step forward, the hackers find another way in to exploit and abuse their products and infect computers with malware. Abuse of macros on files being downloaded over the internet, XLL file exploits in Excel, and now infected OneNote documents shared over cloud networks are just some of the ways that cyber criminals have been keeping themselves busy in recent weeks. The phishing campaign that targets OneNote documents was exposed in a recent study, showing targeted malware attacks that impersonate emails coming from a well-known company. Consumer invoices for utilities in Canada with attached OneNote files using the .one file extension were directed at users in Canada, the UK and the US. The payloads were downloaded from a digital service provider in India and a Catholic Church in Canada, compromised by the attackers and used for hosting the malware files. There are many benefits of using multiple providers like this, including avoiding detection for longer periods of time by using a legitimate website for hosting the malicious code. Cloud computing vulnerabilities for downloading OneNote documents and other files from the cloud are something that must be addressed to protect your business. ## Targeted Malware Attacks Once the users opened the OneNote documents, they were infected with AsyncRAT, which has been identified as a remote access tool that was designed to allow an attacker to infiltrate any connected devices to the target victim’s primary device. Since 2019, AsyncRAT source code has been available for free on the internet, which means that it has been used, and modified, by hackers around the globe for several years. This particular type of malware can record screens, capture keystrokes, execute code, launch DDoS attacks, and otherwise manipulate files within the system. To say that it is a multi-purpose remote access tool is an understatement. Some of the known uses for this phishing campaign that uses AsyncRAT targeted malware attacks include cyber-espionage and financially-oriented goals. The attacker is able to easily see the machine in the tools admin panel and handle several different machines within the same interface for quick and easy manipulation. Other reported attacks used AsyncRAT to deliver the Formbook malware to steal passwords, take screen captures and execute code on infected systems. It is estimated that use of this popular code and a variety of different related attacks taking advantage of cloud computing vulnerabilities will increase in the coming months. ## Cloud Computing Vulnerabilities The best way to protect your business from things like phishing campaigns, targeted malware attacks, and exploits of cloud-based OneNote documents and other cloud computing vulnerabilities is to have a comprehensive network security solution in place. Taking advantage of professional services, such as our 24/7 monitoring and management, IT technologies, and employee education and support are also extremely beneficial. Contact Synivate at 617-848-1248 to speak with one of our team members about your network security concerns. We can offer custom consultation and solutions based on your unique industry requirements and organizational needs. We offer our services to clients in the Greater Boston area and can assist you in a wide range of innovative technology solutions to help you maximize your abilities, while protecting your essential and sensitive data. Business continuity services, including a backup and recovery program, can ensure quick recovery following an attack or any other type of disaster that might cause you to lose access to your company data and programs. ## Similar posts ### [AI Phishing Attacks: Artificial Intelligence Security Defense](https://synivate.com/blog/ai-phishing-attacks-artificial-intelligence-security-defense) However, more and more cybercriminals are also using this technology, taking advantage of AI phishing attacks to increase their reach... Sean Maguire Jun 7, 2023 ### [Data Privacy Security: Practices to Protect Sensitive Activities](https://synivate.com/blog/data-privacy-security-practices-to-protect-sensitive-activities) However, there are so many more things that can be done to ensure data privacy security, including employee education... Sean Maguire Jun 14, 2023 ### [Employee Training Programs: Prevent Phishing Attacks in Boston](https://synivate.com/blog/employee-training-programs-prevent-phishing-attacks-in-boston) When it comes to preventing phishing attacks in Boston, knowledge is power. The more you learn about how phishing and ransomware attacks... Sean Maguire Sep 30, 2020 ### Get notified on new business technology developments and best practices. We send out recurring updates, tips, compliance suggestions, best practice alignment guidance and more. Simply sign up to receive the latest! ### Subscribe [![Synivate Logo](https://synivate.com/hubfs/synivate_logo_WEB_200_white_v2.png)](https://synivate.com) Synivate 225 Foxborough Boulevard, Suite 203 Foxborough, MA 02035 [+1 617-517-0704](tel:+16175170704) [Click Here to Receive Our Monthly Newsletter](https://share.hsforms.com/1Q84qWUSITLybom6Os9NZ5g4f4b2) [Remote Support](https://rmmus-canyonpoint.screenconnect.com/) ### Learn - [Case Studies](https://synivate.com/casestudy) - [Construction IT](https://synivate.com/managed-it-services-contractors) - [Industrial IT](https://synivate.com/managed-it-services-industrial) - [Manufacturing IT](https://synivate.com/managed-it-services-manufacturing) - [Digital Agency IT](https://synivate.com/managed-it-services-agencies) - [Testimonials](https://synivate.com/testimonials) ### Resources - [Customer Portal](https://synivate.deskdirector.com/) - [SaaS Software Manager](https://www.cloudsubscription.com/) - [Customer Form Instructions](https://synivate.com/resources) - [ITGlue Login](https://synivate.itglue.com/?sso_disabled=true) - [Troubleshooting](https://synivate.com/troubleshooting-tools) - [Sign Up for SMS](https://synivate.com/sms) ### Company - [News](https://synivate.com/blog) - [Careers](https://form.typeform.com/to/V7XCcaCL) - [Equity Partnerships](https://synivate.com/msp-equity-partnerships) - [Referral Partnerships](https://form.typeform.com/to/VvhaJWkV) - [Inc 5000](https://www.inc.com/profile/synivate) - [Top 100 Managed Service Providers](https://synivate.com/blog/synivate-ranked-on-msp501-2023) - [Privacy Policy](https://synivate.com/privacy-policy) - [Terms & Conditions](https://synivate.com/terms-and-conditions-2026) © 2025 Synivate, LLC | [Foxborough](https://synivate.com/managed-services-foxborough) | [Boston](https://synivate.com/managed-services-boston) | [Sharon](https://synivate.com/managed-services-sharon) | [Canton](https://synivate.com/managed-services-canton) | [Norwood](https://synivate.com/managed-services-norwood) | [Needham](https://synivate.com/managed-services-needham) | All Rights Reserved [Powered by Atlas - a B2B SaaS HubSpot theme](https://www.kalungi.com/atlas-hubspot-theme-for-b2b-saas-software) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Sean Maguire", "url" : "https://synivate.com/blog/author/seanmaguire" }, "dateModified" : "2025-03-04T00:40:23.961Z", "datePublished" : "2023-02-22T17:53:14.000Z", "headline" : "OneNote Documents, Phishing & Cloud Computing Vulnerabilities", "image" : [ "https://synivate.com/hubfs/Imported_Blog_Media/phishing-cloud-vulnerabilities.jpg" ], "mainEntityOfPage" : { "@id" : "https://synivate.com/blog/onenote-documents-phishing-cloud-computing-vulnerabilities", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://api.hubapi.com/avatars/v1/signed-uris/1ClQKEAgEEgxzeW5pdmF0ZS5jb20Y267z-wUg0YmaASonYnJhbmRpbmc6YXBpOndlYjp1c2VyLXRyYWZmaWM6dXMtZWFzdC0xMgw3NS42OS4xNjUuNzUSGQB7DcdkR7KI_eioiGlXTyyZcvaVC7WcSBw" }, "name" : "Synivate" } } ``` ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Sharon", "addressRegion" : "MA", "postalCode" : "02067", "streetAddress" : "6 Merchant Street, Suite 3" }, "contactPoint" : { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : [ "English" ], "contactType" : "Customer Service", "telephone" : "+1-617-517-0704" }, "description" : "Synivate provides comprehensive managed IT services, cybersecurity solutions, cloud computing, and business continuity planning for companies across Greater Boston and beyond. Our integrated services keep your business secure, connected, and running smoothly.", "founder" : { "@type" : "Person", "name" : "Sean Maguire" }, "logo" : "https://synivate.com/hubfs/Landing%20Page%20Assets/synivate_logo_WEB_200.png", "name" : "Synivate", "sameAs" : [ "https://www.linkedin.com/company/synivate-inc-/" ], "url" : "https://synivate.com" } ```