Come riconoscere Helpdesk vishing scam steals SSO credentials from finance sector employees?

Ascolta l'episodio

In breve

Cybercriminals linked to the BlackFile extortion group are calling employees on their personal mobile phones, spoofing the corporate IT helpdesk, and asking them to enroll in passkeys or update multi factor authentication settings. Victims...

Come funziona

Indicatori rossi

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Cosa fare

1Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

Fonte

bleepingcomputer

Fonte verificata da Mythos Forensic Team

https://www.bleepingcomputer.com/news/security/hedge-fund-cyberattacks-tied-to-blackfile-linked-unc6671-extortion-group/

FAQ

Helpdesk vishing scam steals SSO credentials from finance sector employees e una truffa reale?

Si. Tratta messaggi, chiamate o richieste di pagamento come sospette finche non le verifichi da un canale ufficiale.

Quali sono i primi segnali?

Unexpected call from "IT" on your personal mobile asking you to install software or change MFA settings. You are rushed through a multi step login that ends on a URL that does not exactly match your company's real domain. Security or password reset emails disappear from your inbox without your action

Cosa devo fare subito?

Hang up and call your IT helpdesk back on a number published in the corporate directory. Never approve MFA prompts or install remote tools driven by an inbound

LegalAudit puo controllare il mio caso?

Si. Apri la chat gratis e incolla messaggio, link, mittente o dati di pagamento per un triage.