Wie erkennen Sie Helpdesk vishing scam steals SSO credentials from finance sector employees?

Kurzfassung

Cybercriminals linked to the BlackFile extortion group are calling employees on their personal mobile phones, spoofing the corporate IT helpdesk, and asking them to enroll in passkeys or update multi factor authentication settings. Victims...

Wie es funktioniert

Warnzeichen

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Was tun

1Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

Quelle

bleepingcomputer

Quelle geprueft vom Mythos Forensic Team

https://www.bleepingcomputer.com/news/security/hedge-fund-cyberattacks-tied-to-blackfile-linked-unc6671-extortion-group/

FAQ

Ist Helpdesk vishing scam steals SSO credentials from finance sector employees ein reales Betrugsmuster?

Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.

Was sind die ersten Warnzeichen?

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Was sollte ich zuerst tun?

Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

Kann LegalAudit meinen Fall pruefen?

Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.