FBI warns of phishing targeting high-profile brands' customers

guest · Nov 23, 2021

FBI warns of phishing targeting high-profile brands' customers
November 23, 2021
https://www.bleepingcomputer.com/ne...hing-targeting-high-profile-brands-customers/

The Federal Bureau of Investigation (FBI) warned today of recently detected spear-phishing email campaigns targeting customers of "brand-name companies" in attacks known as brand phishing.

This warning was issued as a public service announcement through the bureau's Internet Crime Complaint Center platform in coordination with DHS' Cybersecurity and Infrastructure Security Agency (CISA).
Click to expand...

Attackers embed login forms or malware into their phishing pages with the end goal of stealing their victims' user credentials, payment details, or various other types of personally identifiable information (PII).

In addition to these ongoing phishing attacks, threat actors are also likely developing tools to bait potential targets into revealing info for bypassing account protections two-factor authentication (2FA) by intercepting emails and compromising accounts.

"When cyber criminals gain access to a consumer's online and email accounts, cyber criminals may be able to intercept emails with 2FA codes that are used to make significant changes to online accounts, update passwords, verify user access, or change security rules and setup before the account owner is notified and aware," the federal law enforcement agency said.
Click to expand...

FBI: Cyber Criminals Likely Developing and Selling Scamming Tools to Harvest Credentials of Brand-Name Consumers

The Federal Bureau of Investigation (FBI) is releasing this PSA to inform the public of recent spear phishing email campaigns targeting consumers of brand-name companies, also known as brand-phishing, through their online User IDs and associated email accounts. Cyber criminals are very likely developing and selling scamming tools to trick consumers of brand-name companies into revealing personal account information to compromise accounts and bypass online security protocols, most notably two-factor authentication (2FA).
Click to expand...

WHAT ARE BRAND-PHISHING EMAILS?
A brand-phishing email is an email cyber criminals send to impersonate the official websites of prominent brands – such as those within the technology, banking, shipping, and retail industries – to trick consumers into revealing sensitive personal account information.
Click to expand...

MOTIVES TO TARGET BRAND-NAME CONSUMERS
The FBI has observed cyber criminals selling scamming software and offering these tools with the appearance of their own ongoing technical support. Cyber criminals are financially motivated to develop these scampage tools to enhance their scamming tactics and more effectively harvest the credentials of consumers to compromise and takeover account access.

Much like the threat with ransomware-as-a-service, this type of product-as-a-service distribution of scampage and credential harvesting tools presents an increased nationwide risk to private sector businesses and their consumers.
Click to expand...

Log in or Sign up

FBI warns of phishing targeting high-profile brands' customers

guest Guest

Log in or Sign up

FBI warns of phishing targeting high-profile brands' customers

guest Guest

Useful Searches