Forest Global Training Partners

Cyber Risks · Krebs on Security

Voice Phishers Targeting Corporate VPNs

Summary: A voice phishing gang is calling employees at financial, telecommunications and social media companies, posing as IT staff troubleshooting VPN issues, and directing them to custom phishing pages that capture both credentials and one-time multi-factor codes. The group operates on paid bounties, registers domains at a handful of bitcoin-accepting registrars with one domain per account, and keeps each phishing site offline until the moment of the call, then disables it afterward.

Bottom line: The attackers defeat multi-factor authentication by requesting the one-time code on the same phishing page and using it in real time, so the codes' short validity window offers no protection; researchers say physical U2F security keys are the option that appears immune to these scams.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related