WiseSec Offense

Imagine that Bob, an employee at a mid-sized corporation, receives an unexpected email one morning. The email, which appears to be from the company’s IT department, warns him that his password is due to expire in 24 hours and he must login to his account via the link in the email immediately to avoid any disruption to his access. Concerned about losing access to his emails, Bob clicks on the prominently displayed “Reset Password” link in the email.

The link redirects him to a login page that closely resembles the company’s official login portal. Without hesitation, Bob enters his current username and password, believing he is following standard procedure. After submitting his credentials, the page redirects him to his mailbox.

However, unknown to Bob, the email was a sophisticated phishing attempt, and he has just provided his credentials to an attacker using an phishing attack. The threat actor captures his email address and password, and MFA code, along with the session tokens. With the session tokens, they gain unimpeded access to Bob’s email account, potentially compromising sensitive corporate data and causing significant security breaches.

What should Bob do now?

Now this would be down right scary! Happy Halloween from the staff at WiseSec Offense!

This is awesome news for Sophos and Secureworks!

Sophos to Acquire Secureworks to Accelerate Cybersecurity Services and Technology for Organizations Worldwide Sophos and Secureworks, two global leaders of innovative security solutions for defeating cyberattacks, today announced a definitive agreement for Sophos to acquire Secureworks.

I Got Accused of Posting Hate Speech...

I Got Accused of Posting Hate Speech Free Security Awareness Training • Simply Explained • Access Anywhere • Follow Progress

Can you imagine getting a email stating you were being let go from your job due to economic downturn? Watch the below video of how scammers are doing exactly that.

Getting Fired Cost My Employer Millions Free Security Awareness Training • Simply Explained • Access Anywhere • Follow Progress

Happy 4th of July!

Is your office or IT support using TeamViewer? You may want to consider checking your systems for this compromise reported by Bleeping Computers and Huntress.

https://www.bleepingcomputer.com/news/security/teamviewer-abused-to-breach-networks-in-new-ransomware-attacks/

Lego's being funny!