Login

News on Medial

Account compromise of “unprecedented scale” uses everyday home devices

ArstechnicaArstechnica · 6m
Account compromise of “unprecedented scale” uses everyday home devices

Okta has issued a warning about an ongoing campaign that uses fraudulent login requests to conceal malicious activity. The campaign involves routing login attempts through the mobile devices and browsers of everyday users, making it difficult to identify and combat the attacks. The attackers use various techniques, including the TOR network and proxy services, to mask their IP addresses. They then use these devices in credential-stuffing attacks, trying to gain unauthorized access to online accounts by using login credentials obtained from previous breaches. Okta advises users to be cautious when installing apps or enrolling in services and provides guidance for network administrators to protect against credential-stuffing attacks.

3
View Source

Comments

More Like this

A new Microsoft Azure hacking campaign is targeting high-end executives

A new Microsoft Azure hacking campaign is targeting high-end executives

Fintech and ecommerce companies were the most popular cybercrime targets last year

Fintech and ecommerce companies were the most popular cybercrime targets last year

1Password detects “suspicious activity” in its internal Okta account

1Password detects “suspicious activity” in its internal Okta account

What 2023 taught us about eCommerce security

What 2023 taught us about eCommerce security

Thousands of phones and routers swept into proxy service, unbeknownst to users

Thousands of phones and routers swept into proxy service, unbeknownst to users

Unravelling the threat of data poisoning to generative AI

Unravelling the threat of data poisoning to generative AI

Today’s smart homes: the hopes and the realities

Today’s smart homes: the hopes and the realities

“This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard

“This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard

Google takes another bite out of Apple, offering Find My Device for Android phones even if they're offline

Google takes another bite out of Apple, offering Find My Device for Android phones even if they're offline

Cert-In flags multiple vulnerabilities in Apple’s iPhone, iPad operating systems

Cert-In flags multiple vulnerabilities in Apple’s iPhone, iPad operating systems

Download the medial app to read full posts, comements and news.