Fake IT Support Calls Hit 20 Orgs, End in Stolen Data

Fake IT support voice calls lead to cyber extortion and stolen company data

Hackers are tricking employees into downloading malware that exfiltrates important data.

Fake IT support calls hit 20 orgs, end in stolen data

: Victims include hospitality, retail and education sectors

Daviess County residents targeted by fake jury duty calls

Residents are advised to hang up immediately, verify the call by contacting the respective agency, and never send money.

Fake IT Support Calls Hit 20 Orgs, End in Stolen Salesforce Data and Extortion, Google Warns

A group of financially motivated cyberscammers who specialize in Scattered-Spider-like fake IT support phone calls managed to trick employees at about 20 organizations into installing a modified version of Salesforce's Data Loader that allows the criminals to steal sensitive data. From a report: Google Threat Intelligence Group (GTIG) tracks this crew as UNC6040, and in research published today said they specialize in voice-phishing campaigns ta…

Fake IT support calls hit 20 orgs, end in stolen data • The Register | #cybercrime | #infosec - National Cyber Security Consulting

A group of financially motivated cyberscammers who specialize in Scattered-Spider-like fake IT support phone calls managed to trick employees at about 20 organizations into installing a modified version of Salesforce's Data Loader that allows the crims to steal sensitive data. Google Threat Intelligence Group (GTIG) tracks this crew as UNC6040, and in research published today […] Thank you for subscribing to our RSS feed! The post Fake IT suppor…

Attackers fake IT support calls to steal Salesforce data - Help Net Security

Over the past several months, a threat group has been actively breaching organizations’ Salesforce instances and exfiltrating customer and business data, Google Threat Intelligence Group (GTIG) has warned. The attackers in question – currently tracked as UNC6040 – are masters at voice phishing (“vishing“): they are impersonating the organizations’ IT support personnel and manipulating employees into sharing credentials and connecting a malicious…