Phishing attack spoofs Twitter to steal account credentials

guest · Jul 6, 2020

Phishing attack spoofs Twitter to steal account credentials
July 6, 2020
https://www.techrepublic.com/article/phishing-attack-spoofs-twitter-to-steal-account-credentials/

Phishing campaigns are a favored tactic among many cybercriminals because they're relatively easy to set up and deploy. Because the phishing emails typically impersonate a well-known company or brand, they stand a good chance of trapping unsuspecting victims who have accounts with the spoofed entity.

Described in a recent blog post from Abnormal Security, this attack was aimed toward a specific person who works at an organization that heavily uses Twitter. The goal was to alarm this individual with an urgent security notification in an attempt to obtain their Twitter password.
Click to expand...

Using the Twitter brand name and logo, the initial email itself impersonated a Twitter security alert by claiming that the recipient's account was used to log into a different device in a different location, specifically a Windows 7 computer in Canada.
The email states that if this login came from the recipient, there's no need to take any action.

This type of attack is designed to succeed on a few levels.
Click to expand...

Abnormal Security: Abnormal Attack Stories: Twitter Impersonation

Why is this attack effective?
Urgency: By masquerading as a security notification, the attacker is able to inject a sense of urgency in this correspondence.
Convincing Email and Landing Page: The email appears to be automated notification, with the fake landing page appearing similar to Twitter’s actual login page.
Targeted Attack: This attack is highly sophisticated and unique as it targets a specific individual in this organization.
Click to expand...

Log in or Sign up

Phishing attack spoofs Twitter to steal account credentials

guest Guest

Log in or Sign up

Phishing attack spoofs Twitter to steal account credentials

guest Guest

Useful Searches