Forest Global Training Partners

Cyber Risks · Cisco Talos

Unplug your way to better code

Summary: Cisco Talos reports that attackers favor API-driven VoIP numbers for high-volume Telephone-Oriented Attack Delivery campaigns, rotating through sequential blocks of numbers, using cool-down periods, and recycling the same digits across unrelated lures and impersonated brands. The newsletter also notes DigiCert revoking certificates after a support portal hack on April 2, Ubuntu service outages from a DDoS-for-hire service claiming attacks above 3.5 Tbps, and CISA warning of exploitation of a Linux kernel flaw called Copy Fail affecting distributions since 2017.

Key Takeaway: Talos states that tracking ephemeral sender email addresses is a losing game while phone numbers serve as the true operational anchors for organized scam call centers, so defenders who cluster telephony infrastructure can expose the broader network before users hand over sensitive data.

Read the original at Cisco Talos ↗

Topics
Malware
Related