TurkeyBombing Puts New Twist on Zoom Abuse

Hackers stole nearly 4,000 credentials before Thanksgiving was even over.

While millions of people were forced to spend the holidays away from their loved ones and family, cybercriminals took advantage of the situation and launched a new phishing attack, called TurkeyBombing.

Using the Zoom platform’s incredible popularity and recognisable branding, phishing messages were sent en masse, telling recipients that: “You received a video conference invitation,” Messages included a link to review the malicious invitation, which lead victims to a fake Microsoft login page, with the email address already filled in. All that was left for the users was to type their passwords. And a lot of them did.

Check the source.

Read More

• H0lyGh0st Ransomware After Small and Midsize Businesses
  Microsoft has linked H0lyGh0st, a cyberthreat that emerged in June 2021 and targets small-to-midsized businesses, to North Korean state-sponsored […]
• Popular NFT Marketplace Ravaged by $540M Phishing Scheme
  In March, a North Korean APT netted $540 million thanks to a massive phishing operation carried out on the […]
• Massive $59M Facebook Phishing Campaign Steals Nearly 400M Credentials
  Threat actors have managed to net a staggering $59 million and steal hundreds of millions of credentials in a […]
• Human Error is a Top Security Risk in 2022, New Report Shows
  A new report from Verizon warns about the human error as being one of the most frequent causes of […]
• Paying The Ransom – An Open Invitation For A Second Attack, 2022 Report Warns
  Whether the unlucky victim of a ransomware attack ends up paying the ransom or not, they are still susceptible […]

Attribution:

Photo by Glen Carrie on Unsplash