The West’s failed fight against China’s ‘Cloud Hopper’ hackers

Re:The West’s failed fight against China’s ‘Cloud Hopper’ ha... by 0xcde4c3db on Wednesday June 26, 2019 @09:42AM (#20284904)

Which ends up being darkly hilarious when they're whitelisted, leading to a situation where literally every "phishing attempt" an employee ever sees is a fake crafted to conform to the stereotypes given in the training.

[ Parent | on HN ]

Re:The West’s failed fight against China’s ‘Cloud Hopper’ ha... by logfromblammo on Wednesday June 26, 2019 @11:51AM (#20286129)

My employer uses PhishMe. Every "phishing attempt" I see is from my own employer. It is not adaptive. They don't scale up the apparent sophistication of the attack if previous attempt didn't work. So I am continually getting e-mails from "HR" asking me to update my contact info, or from "Expense Reports" asking me to verify some info to get reimbursed for my travel expenses.

It's annoying.

[ Parent | on HN ]

Re:The West’s failed fight against China’s ‘Cloud Hopper’ ha... by Tactic on Wednesday June 26, 2019 @10:59AM (#20285615)

Indeed. I setup a rule in outlook to look for knowbe4 in the header to dump those. Although, to be fair, I doubt it is the devs they are worried about.

[ Parent | on HN ]