Comment reconnaitre Helpdesk vishing scam steals SSO credentials from finance sector employees?

En bref

Cybercriminals linked to the BlackFile extortion group are calling employees on their personal mobile phones, spoofing the corporate IT helpdesk, and asking them to enroll in passkeys or update multi factor authentication settings. Victims...

Comment ca fonctionne

Signaux d'alerte

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Que faire

1Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

Source

bleepingcomputer

Source verifiee par Mythos Forensic Team

https://www.bleepingcomputer.com/news/security/hedge-fund-cyberattacks-tied-to-blackfile-linked-unc6671-extortion-group/

FAQ

Helpdesk vishing scam steals SSO credentials from finance sector employees est une vraie arnaque ?

Oui. Traitez le message, l'appel ou la demande de paiement comme suspect jusqu'a verification via un canal officiel.

Quels sont les premiers signaux ?

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Que faire en premier ?

Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

LegalAudit peut-il verifier mon cas ?

Oui. Lancez le chat gratuit et collez le message, le lien, l'expediteur ou les details de paiement.