🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥
Login

News on Medial

FCC and crypto firms are being hit in advanced phishing attacks using fake Okta logins

TechradarTechradar · 1y ago
FCC and crypto firms are being hit in advanced phishing attacks using fake Okta logins
Medial

Security researchers have discovered a sophisticated phishing campaign targeting employees of the US Federal Communications Commission (FCC) and leading cryptocurrency exchanges, including Binance and Coinbase. The threat actor behind the campaign aims to obtain login credentials for Okta, a popular authentication platform. The attackers create fake landing pages that are nearly identical to the genuine ones and use phishing kit CryptoChameleon to engage with victims through emails, calls, and SMS messages. The campaign has successfully phished over 100 victims so far, with many still being targeted. The researchers believe the campaign is similar to the 2022 Oktapus campaign.

Related News

India tops global list for mobile malware attacks: report

Economic TimesEconomic Times · 6m ago
India tops global list for mobile malware attacks: report
Medial

India has emerged as the global leader in mobile malware attacks, overtaking the United States and Canada, according to a report by Zscaler ThreatLabz. The report shows that India accounted for 28% of total mobile malware attacks, surpassing the US (27.3%) and Canada (15.9%). The rise in attacks highlights the urgent need for Indian enterprises to strengthen their cybersecurity measures. The financial sector in India is particularly vulnerable, with a 29% increase in banking malware attacks and a 111% rise in mobile spyware attacks. Phishing attacks targeting major Indian banks have also increased, with attackers using fake websites and SMS messages to deceive users into revealing sensitive information.

Account compromise of “unprecedented scale” uses everyday home devices

ArstechnicaArstechnica · 1y ago
Account compromise of “unprecedented scale” uses everyday home devices
Medial

Okta has issued a warning about an ongoing campaign that uses fraudulent login requests to conceal malicious activity. The campaign involves routing login attempts through the mobile devices and browsers of everyday users, making it difficult to identify and combat the attacks. The attackers use various techniques, including the TOR network and proxy services, to mask their IP addresses. They then use these devices in credential-stuffing attacks, trying to gain unauthorized access to online accounts by using login credentials obtained from previous breaches. Okta advises users to be cautious when installing apps or enrolling in services and provides guidance for network administrators to protect against credential-stuffing attacks.

How to stay safe from cybercriminal "quishing" attacks

TechradarTechradar · 1y ago
How to stay safe from cybercriminal "quishing" attacks
Medial

Phishing attacks using QR codes, also known as "quishing," are gaining momentum as scammers aim to bypass multi-factor authentication (MFA). QR phishing takes advantage of users' trust and familiarity with QR codes, embedding malicious codes in seemingly legitimate emails. Scammers can then redirect users to phishing sites designed to steal business credentials and MFA tokens. The success of quishing lies in the less secure nature of mobile devices, difficulty in detecting malicious links behind QR codes, and effective social engineering techniques. Businesses need to implement stronger security measures, such as training employees to recognize these attacks, enforcing strict password policies, reducing MFA token expiration time, and implementing anomaly detection and extended detection and response (XDR) solutions for monitoring and rapid response.

Download the medial app to read full posts, comements and news.