Tuesday 14 May 2013

Sophisticated social engineering campaign hits French company

Social Engineering hackers have used an sophisticated attack on French-speaking accounting and finance department employees. The victims were called and asked in French if they were able to process an invoice sent by e-mail.
The style of attack, known as "spear phishing," has been used against French organizations, including subsidiaries in Romania and Luxembourg.
"There is evidence to suggest that these attacks began as early as February 2013, however, it was only more recently in April that phone calls were being placed prior to sending the victim the phishing email," Symantec wrote on its blog
The company said the attackers may have just limited information on their targets and recommended those receiving a call ask additional questions to verify the caller is legitimate. Sensitive information should also be encrypted

No comments:

Post a Comment