Cybercriminals Use Chipotle’s Marketing Account for Phishing Attacks

guest · Jul 30, 2021

Cybercriminals Use Chipotle’s Marketing Account for Phishing Attacks
At Least 120 Malicious Emails Were Sent During the Phishing Operation.
July 30, 2021
https://heimdalsecurity.com/blog/cybercriminals-use-chipotle-marketing-account-for-phishing-attacks/

An email marketing account that belongs to the American chain of fast casual restaurants specializing in tacos Chipotle has been compromised by cybercriminals who used it to conduct a phishing campaign.

Threat actors send out phishing emails in an attempt to convince their targets into clicking on malicious links.
Almost all the messages guided the potential victims to credential-collecting websites posing as services from a banking organization and tech company Microsoft. Fortunately, just a few phishing emails had malware attachments.

During the phishing operation, more than 120 malicious emails were sent from a hacked Mailgun account that the American business used for email marketing purposes [mail.chipotle.com].
Click to expand...

Source
According to BleepingComputer, the emails seemed to come from “Microsoft 365 Message center” and notified the victim of emails that could not be sent “due to low email storage” in the cloud.
So when the user clicks on the button that supposedly “release messages to inbox” he is immediately redirected to a false Microsoft login page that collects the confidential data.
Click to expand...

Log in or Sign up

Cybercriminals Use Chipotle’s Marketing Account for Phishing Attacks

guest Guest

Log in or Sign up

Cybercriminals Use Chipotle’s Marketing Account for Phishing Attacks

guest Guest

Useful Searches