Fallout from Recent Spear Phishing Attacks?
Summary: McDonald's and Walgreens disclosed breaches at partner marketing firms that exposed customer information, and deviantART said its e-mail database of 13 million addresses was hacked and blamed partner SilverPop Systems. Krebs reported that criminals ran targeted spear phishing attacks against employees at more than 100 e-mail service providers, and FBI special agent Stephen Emmett told The Register the Silverpop breach appears to emanate from an overseas location.
Bottom line: More than 100 companies were hit through the same trust chain, and the FBI traced it overseas, so the disclosures are likely to keep coming. The stolen data is mostly e-mail addresses and birthdays, but Krebs notes that is enough for skilled attackers to pose convincingly as the victim company and extract more useful data such as passwords.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026