Washington Post Site Hacked After Successful Phishing Campaign
Summary: The Washington Post acknowledged that a sophisticated phishing attack against its newsroom led to its website being seeded with code that redirected readers to the Syrian Electronic Army's site for 30 minutes. According to KrebsOnSecurity, the campaign spoofed the Post's internal Outlook Web Access login page and hooked lead sports writer Jason Reid, whose hacked email was then used to send further likely malware-laced phishing emails to other newsroom employees.
Bottom line: A single reporter's credentials were enough to spread phishing emails across an entire newsroom, and the same group's earlier hijack of the Associated Press Twitter account briefly sent the Dow down 140 points.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026