Le corporation, Website

New Delhi, Feb 6 Cyber-security researchers on Monday said they have discovered a spear phishing campaign targeting multiple IT firms where scammers were sending WhatsApp messages to top tier employees' personal numbers pretending to be their CEO.CloudSEK analysts found a spear phishing campaign targeting multiple corporations wherein a specific form of a message purportedly coming from superiors or CEOs may actually be a fraud.In these messages, the threat actor pretends to be the company's CEO and sends a WhatsApp message to employees (mostly top-level executives) on their personal phone numbers.Scammers misuse CEOs' publicly available pictures by using WhatsApp profile pictures as a social engineering tactic to convince the victim."The research unveiled lead generation and business information tools being misused by these scammers to extract personal phone numbers," said a CloudSEK researcher.The scam begins with employees receiving an SMS-based message from an unknown number allegedly impersonating a top-ranking executive from the organisation.The reason for impersonating the top-ranking executive is to instill urgency and panic.If the receiver of the SMS acknowledges the scammer with a response, the threat actor/scammer would request to complete a quick task. The quick tasks commonly include purchasing gift cards for a client or employee and/or wiring funds to another business."In some cases, the scammer may ask employees to send personal information (like PINs and passwords) to third parties, often providing a plausible reason to carry out the request," said the report.Threat actors often use commanding and persuasive language to convince the email victim to respond.Senior employees of the organisation can be looked up from LinkedIn.Threat actors then use popular sales intelligence or lead generation tools such as Signalhire, Zoominfo, Rocket Reach to gather personal identifiable information (PII) like emails, phone numbers, and more."These online databases of businesses have their methodologies for obtaining, verifying, and then selling the employees' contact details of an entity," said the report.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Le CorporationFOLLOW

Le corporation, Latest News

New Delhi, May 1 Filming a "day-in-my-life" vlog on TikTok, an Amazon employee inadvertently captured the moment of ... ...

San Francisco, April 13 Professional networking platform LinkedIn has introduced new ways to verify your identity and where ... ...

San Francisco, March 16 Professional networking platform LinkedIn has added AI-powered writing suggestions and job descriptions to its ... ...

San Francisco, March 5 Professional networking platform LinkedIn has introduced a new feature called "collaborative articles", which ... ...

Mumbai, March 1 It is a relief for Suniel Shetty as he is looking forward to share screen ... ...

New Delhi, Feb 27 Professional networking major LinkedIn has been hit by several state-of-the-art recruitment scams after massive ... ...

Media reports in 2021 stated that Indian women make up nearly 43 per cent of the total graduates in Science, Technology, Engineering and Mathematics (STEM) but just constitute 14 per cent of scientists, engineers, and technologists in research develo ...

New Delhi, Feb 6 Cyber-security researchers on Monday said they have discovered a spear phishing campaign targeting multiple ... ...