Financial Cyber Threat Sharing Group Phished
Summary: FS-ISAC, the financial industry's threat-sharing forum, reported that an employee clicked a phishing email on Feb. 28 and gave up login credentials, which a threat actor then used to send a PDF linking to a credential-harvesting site to select members, affiliates and employees. FS-ISAC said the employee was not yet enrolled in multi-factor authentication, that it is accelerating MFA across all assets, and that it upgraded its Office 365 email version for additional visibility and security.
Bottom line: The organization whose members share critical threat data got compromised by what its own chief information risk officer called routine, non-targeted account harvesting - on the one asset without MFA - and the phishing emails went out under an FS-ISAC address that recipients already trusted.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026