Spear Phishing Attacks Snag E-mail Marketers
Summary: Criminals ran targeted spear-phishing attacks against employees at more than 100 email service providers over several months, sending virus-laden messages that addressed recipients by name and lured them to sites hosting password-stealing software. One compromised ESP traced the intrusion to internet addresses in the Netherlands and found evidence that at least a dozen other ESPs were similarly compromised, with attackers seeking control of customer accounts and email address lists.
Bottom line: The attackers were after the deployment systems and mailing lists that ESPs manage for some of the world's largest corporate brands, and Return Path said a small list of its client alert addresses may have been compromised - addresses that themselves have downstream access to larger email lists.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026