social engineering
"The core vulnerability is a help desk process that lacks robust, non-transferable identity verification for password resets..."
Interlock is known for using "double extortion methods" to encrypt and exfiltrate data.
A range of ransomware groups have been seen spoofing IT support numbers or abusing default Teams credentials in social engineering attacks over the past 18 months.
From @easymunny, to @easyjailtime
"Hi. This is the Prezident here on zelensky.prank@rebel.spirit. Can I have your number and your friends' too?"
US authorities have charged two people with fraud, cyberstalking, and money laundering charges related to a massive catfishing operation
"This is your CEO, I'm in a meeting and need your help"
Employees need to be trained to respond to errant MFA push requests on their phones
