#социальная-инженерия
-
ASOS Blames Data Breach on Social Engineering and Stolen Credentials
UK online fashion retailer ASOS has confirmed that its recent data breach stemmed from attackers tricking an employee out of login credentials and using them to reach the company's third-party platforms.
-
Rust Developers Warned of Targeted Attacks on Their Accounts and Devices
The Rust security working group and the Crates.io team have reported an ongoing campaign against key project contributors and owners of popular crates. The goal: to spread malicious code across the language's ecosystem.
-
Apollo confirms data breach amid a wave of attacks on financial giants
One of the world's largest private equity funds has reported the theft of personal data from its cloud infrastructure. The breach occurred a month after a warning from Google researchers.
-
RingCentral Data Breach Affects 1.6 Million Accounts
The ransomware group ShinyHunters stole personal data from users of the RingCentral cloud platform following a July breach. The leak was confirmed by the Have I Been Pwned service.
-
Levi Strauss Says Corporate Data Was Stolen After Attack on Employees
Using social engineering, hackers broke into the work computers of three employees of the jeans maker and stole corporate information. According to the company, customer data was not affected.
-
Namecheap Handed an Account to a Stranger on Nothing but a Phone Request
A 13-year Namecheap customer describes how the registrar handed control of his account to someone who merely asked for it politely over the phone — without any verification whatsoever.
-
Russian APT Groups Adopt the ClickFix Technique
The ClickFix social-engineering trick, previously used mostly by financially motivated cybercriminals, is now being deployed by elite hacking groups linked to Russia.
-
Scammers Posing as IT Support Distribute EtherRAT Malware via Microsoft Teams
Attackers call company employees on Microsoft Teams, impersonating IT support staff, and convince them to install the EtherRAT malware.