There was a phishing attack the other day when a large company acquired a small company.
It was a phishing attack, and people started submitting information about their families, their kids, their Social Security numbers.
It is not clear whether the new lists was part of the same phishing attack that collected the Hotmail addresses or a separate scam.
They have not been able to establish how exactly the hackers broke into the system, but believe it may have been through a so-called spear-phishing attack, where an employee clicked on an email or link containing malicious code.
As Apple is using the reply-to address of a message's User Data Header to identify the origin rather than the raw source, receiving iPhone owners risk being fooled by a phishing attack (or just a dishonest acquaintance) that poses as a contact or a company.
ENGADGET: iPhone reportedly vulnerable to text message spoofing flaw
This action follows a February attempt to exploit my name and my book as part of a spear phishing attack launched at .mil and .gov email accounts (see here and here), but this is not a new focus area for me or for my GreyLogic colleagues.
FORBES: ZeuS Criminals Run A "Poisoning The Well" Attack Against IntelFusion And GreyLogic
But in response to what is believed to be a phishing-style attack - where fraudsters attempt to obtain information such as by email - the company has been directly calling some of its customers.
Spear phishing is a cyber attack that uses disguised emails that seek to convince recipients of a specific organization to provide confidential information.
The rise of social networks, for example, has aided an increasingly common kind of attack known as spear-phishing, says Greg Bell, global service leader for KPMG's information protection practice.
It also said several employees had been sent phishing emails in the days leading up to the attack.
The attack on AP's Twitter account and the AP Mobile Twitter account was preceded by phishing attempts on AP's corporate network.
应用推荐