Forgot your password?
typodupeerror
Security

+ - New 'Spear Phishing' Attacks Target IT Admins->

Submitted by
snydeq
snydeq writes "A new breed of 'spear phishing' aimed at IT admins is gaining prevalence, with emails containing no obvious malicious links fooling even the savviest of users into opening up holes in their company's network defenses. The authentic-looking emails, which often include the admin's complete name or refer to a real project they are working on, are the product of tactical research or database hacks and appear as if having been sent by the company's hosting provider. 'In each case, the victim remembered getting a similar sort of email message when they first signed on with a service and, thus, thought the bogus message was legitimate — especially because their cloud/hosting providers keep bragging about all the new data centers they're continuing to bring online.' The phishing messages often include instructions for opening up mail servers to enable spam relaying, to disable their host-based firewalls, and to open up unprotected network shares. Certainly fodder for some bone-headed mistakes on the part of admins, the new attack 'makes the old days of hoax messages that caused users to delete legitimate operating system files seem relatively harmless.'"
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

New 'Spear Phishing' Attacks Target IT Admins

Comments Filter:

Never test for an error condition you don't know how to handle. -- Steinbach

Working...