/
initial_access_vector:stolen_credentials × victim_sectors:technology × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

huntress.com · medium

Business email compromise (BEC): tactics, warning signs and defensive guidance, with $55B in reported global losses

Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…

bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …