Phishers are Angling for Your Cloud Providers

guest · Aug 30, 2019

Phishers are Angling for Your Cloud Providers
August 30, 2019
https://krebsonsecurity.com/2019/08/phishers-are-angling-for-your-cloud-providers/

Many companies are now outsourcing their marketing efforts to cloud-based Customer Relationship Management (CRM) providers. But when accounts at those CRM providers get hacked or phished, the results can be damaging for both the client’s brand and their customers. Here’s a look at a recent CRM-based phishing campaign that targeted customers of Fortune 500 construction equipment vendor United Rentals.
Click to expand...

guest · Sep 6, 2019

SalesPharce: Hackers Exploit Salesforce, Phish Partners and Customers
September 4, 2019
https://www.avanan.com/resources/salesforce-phishing-attack

Salesforce.com [$CRM] is used by more than 150,000 organizations, boasting over 3.75M users around the globe, making it the world’s most widely used CRM system.

Avanan recently uncovered a phishing attack that was using Salesforce's invoice-sending functionality against one of our customers (a Fortune 500 company). Hackers compromised one of their vendors' Salesforce account to send the customer phishing emails with fake invoices. Because these fake invoices replicated the patterns of legitimate invoices, they were almost untraceable by the security layers of Office 365.
Click to expand...

SalesPharce Attack - How It Works
In the attack, hackers compromised a Salesforce account to utilize Email Studio — a tool in the Salesforce.com ecosystem that enables users to build and send personalized email communications — to coordinate a massive invoice phishing attack against partners and customers.

Avanan's analysis of the attack also revealed that the hackers managed to compromise the public website of the sender’s company and inject two malicious URL paths. The phishing campaign (coming from Salesforce - a legitimate source) contained links that were pointing to what looked like the company's legitimate website.
[...]
In the example we analyzed, the hackers target was to install a trojan malware on the endpoints. Therefore, the URLs were pointing to pages that start downloading malware. But the same scam could apply to fake invoices or credential harvesting pages.
Click to expand...

Log in or Sign up

Phishers are Angling for Your Cloud Providers

guest Guest

guest Guest

Log in or Sign up

Phishers are Angling for Your Cloud Providers

guest Guest

guest Guest

Useful Searches