FBI, CISA Echo Warnings on ‘Vishing’ Threat

guest · Aug 22, 2020

FBI, CISA Echo Warnings on ‘Vishing’ Threat
August 21, 2020
https://krebsonsecurity.com/2020/08/fbi-cisa-echo-warnings-on-vishing-threat/

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued a joint alert to warn about the growing threat from voice phishing or “vishing” attacks targeting companies.

The joint FBI/CISA alert (PDF) says the vishing gang also compiles dossiers on employees at the specific companies using mass scraping of public profiles on social media platforms, recruiter and marketing tools, publicly available background check services, and open-source research.

The advisory includes a number of suggestions that companies can implement to help mitigate the threat from these vishing attacks, [...]
Click to expand...

Cybersecurity Advisory: Cyber Criminals Take Advantage of Increased Telework Through Vishing Campaign

guest · Jan 18, 2021

FBI warns of vishing attacks stealing corporate accounts
January 18, 2021
https://www.bleepingcomputer.com/ne...-vishing-attacks-stealing-corporate-accounts/

The Federal Bureau of Investigation (FBI) has issued a notification warning of ongoing vishing attacks attempting to steal corporate accounts and credentials for network access and privilege escalation from US and international-based employees.

According to the TLP:WHITE Private Industry Notification (PIN) shared on Friday [PDF], the threat actors are using Voice over Internet Protocol (VoIP) platforms (aka IP telephony services) to target employees of companies worldwide, ignoring their corporate level.

"During COVID-19 shelter-in-place and social distancing orders, many companies had to quickly adapt to changing environments and technology," the PIN reads. "With these restrictions, network access and privilege escalation may not be fully monitored."
Click to expand...

Minimalist · Jun 17, 2021

Geek Squad Vishing Attack Bypasses Email Security to Hit 25K Mailboxes

An email campaign asking victims to call a bogus number to suspend supposedly fraudulent subscriptions got right past Microsoft’s native email controls.
Click to expand...

https://threatpost.com/geek-squad-vishing-bypasses-email-security/167014/

Log in or Sign up

FBI, CISA Echo Warnings on ‘Vishing’ Threat

guest Guest

guest Guest

Minimalist Registered Member

Log in or Sign up

FBI, CISA Echo Warnings on ‘Vishing’ Threat

guest Guest

guest Guest

Minimalist Registered Member

Useful Searches