Forest Global Training Partners

Cyber Risks · Krebs on Security

Phishers are Angling for Your Cloud Providers

Summary: On August 21, customers of United Rentals received invoice emails with booby-trapped links that led to a malware download, sent through a third-party marketing platform United Rentals used for email campaigns. Salesforce said the incident was not a compromise of Pardot but of a Pardot customer account that was not using multi-factor authentication, and United Rentals CIO Dan Higgins described it as an email phishing incident in which an unauthorized third party used a third-party system to deliver what was believed to be a banking trojan.

Key Takeaway: The phishing emails came from United Rentals' own subdomain, wVw.unitedrentals.com, which the company had set up for marketing since 2014 - so the link a recipient clicked pointed at the brand's real domain, not a lookalike. Per the Anti-Phishing Working Group, SaaS providers including CRM and webmail were the most-targeted sector in the first quarter of 2019, at 36 percent of all phishing attacks.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related