{"id":13214,"date":"2022-08-26T15:12:36","date_gmt":"2022-08-26T15:12:36","guid":{"rendered":"https:\/\/scienceandnerds.com\/2022\/08\/26\/a-huge-phishing-campaign-has-targeted-over-130-companies-including-twilio-and-signal\/"},"modified":"2022-08-26T15:12:37","modified_gmt":"2022-08-26T15:12:37","slug":"a-huge-phishing-campaign-has-targeted-over-130-companies-including-twilio-and-signal","status":"publish","type":"post","link":"https:\/\/scienceandnerds.com\/2022\/08\/26\/a-huge-phishing-campaign-has-targeted-over-130-companies-including-twilio-and-signal\/","title":{"rendered":"A huge phishing campaign has targeted over 130 companies, including Twilio and Signal"},"content":{"rendered":"

Source: https:\/\/www.theverge.com\/2022\/8\/26\/23323036\/phishing-scam-campaign-twilio-hack-companies<\/a>
\n
<\/br><\/code><\/p>\n

\n

Over 130 organizations, including Twilio<\/a>, DoorDash<\/a>, and Signal<\/a>, have been potentially compromised by hackers as part of a months-long phishing campaign nicknamed \u201c0ktapus\u201d by security researchers. Login credentials belonging to nearly 10,000 individuals were stolen by attackers who imitated the popular single sign-on service Okta, according to a report from cybersecurity outfit Group-IB<\/a>.<\/p>\n

Targets were sent text messages that redirected them to a phishing site. As the report from Group-IB states, \u201cFrom the victim\u2019s point of view, the phishing site looks quite convincing as it is very similar to the authentication page they are used to seeing.\u201d Victims were asked for their username, password, and a two-factor authentication code. This information was then sent to the attackers. <\/p>\n

\n