Re:Dark Basin: Uncovering a Hack-for-Hire Operation
by badrabbit on Tuesday June 09, 2020 @12:04PM
(#23467813)
That said, there has been a recent trend moving away from phishing. Exposed services are gaining more popularity,especially for cloud vms.
Re:Dark Basin: Uncovering a Hack-for-Hire Operation
by albntomat0 on Tuesday June 09, 2020 @12:18PM
(#23467932)
In that phishing is happening less, or more folks are not properly securing their cloud services?
Re:Dark Basin: Uncovering a Hack-for-Hire Operation
by badrabbit on Tuesday June 09, 2020 @12:51PM
(#23468271)
In that, phishing for malware delivery is getting harder so some gangs try unsecured cloud/onprem assets for initial access. Phishing levels have not changed overall from my perspective but how targeted attacks happen seems to be tilting slightly to other initial access tactics.
Re:Dark Basin: Uncovering a Hack-for-Hire Operation
by whydoyoucare on Tuesday June 09, 2020 @05:09PM
(#23470929)
In another decade, it will continue to be highly successful, since it exploits a basic human qualities (greed, curiosity, fear, etc.).
Key takeaways:
- Phishing continues to be highly successful (not a shocker)
- Phishing as a Service has significant demand
- The researchers enumerated the targets via poor operational security of the attackers, including one who apparently used their CV as a test document.